Skip to content
COOEY

FAIL › dossier

Versa

VENDOR

· dossier confidence 20%

Nissan's Versa, a compact sedan, has been plagued by high-severity remote code execution vulnerabilities in its Director and Concerto products, highlighting a need for robust security posture improvement.

PROFILE
CategoryVendorWhat they doVersa is a compact sedan produced by Nissan, known for its affordability, practicality, and fuel efficiency. Websitehttps://www.nissanusa.com/ ↗
SECURITY POSTURE

Versa has faced high-profile security vulnerabilities, particularly in its web-based Director and Concerto products.

Notable failures
  • CVE-2024-39717: High [RCE] vulnerability in Director allowing unauthenticated upload of malicious PNG files.
  • CVE-2025-34026: High [RCE] vulnerability in Concerto exposed improper authentication, enabling unauthorized access.
Patterns: Repeated unpatched edge-device RCEs; Lack of security awareness training leading to improper configuration
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2024-08-23 CVE-2024-39717 high Versa Director allows unauthenticated upload of malicious PNG files via the 'Change Favicon' feature, enabling remote code execution for administrators.
2026-01-22 CVE-2025-34026 high Versa Concerto exposed improper authentication, allowing unauthorized access to administrative endpoints and sensitive data.
2025-05-21 CVE-2025-34027 critical CVE-2025-34027: The Versa Concerto SD-WAN orchestration platform is vulnerable to an authenticat
Open questions:
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-06 03:45:25.884238+00:00