Chinese hackers exploited a software bug in Versa Director, targeting SD-WAN solutions and affecting US and Indian victims.

Chinese hackers, believed to be part of the state-sponsored Volt Typhoon group, have exploited a previously unknown software bug in Versa Director, a platform used by Versa Networks to manage services for their customers. The cybersecurity firm, Lumen Technologies, identified at least four US victims and one Indian victim, mostly from the ISP, MSP, and IT sectors. Versa Networks acknowledged the vulnerability, but did not confirm the involvement of Chinese hackers. Versa Director, a software-defined wide-area networking (SD-WAN) solution, was reportedly targeted by the hackers, resulting in the upload of malicious files and potential unauthorized access. Lumen Technologies discovered that the Volt Typhoon group has been exploiting the vulnerability, tracked as CVE-2024-39717, which affects all versions of Versa Director prior to 22.1.4. Versa Networks has since released patches and technical details to address the vulnerability.

August 27, 2024
342 Articles