{"id":"CVE-2026-107245","published":"2026-11-10T01:17:12.740","lastModified":"2026-11-10T01:17:12.740","description":"Versa has confirmed a buffer overflow vulnerability in the IPsec implementation on VOS, aka Versa FlexVNF. \n \n Buffer Overflow Vulnerability Description \n \nWhen a maliciously crafted IKE Auth packet is sent to VOS, the vsmd process crashes, thereby resulting in a Denial of Service. An attacker can create a Denial-of-Service attack on the VOS appliances by crafting a malicious IKE Auth packet and sending it to the WAN interfaces on the VOS. \n \nDuring the IKE Authentication phase, if the IKE SA negotiation fails, and the size of the Remote ID is larger than the buffer size used to process the Remote ID, it will result in a crash of the vsmd process on the VOS appliance. \n \nWhat is impacted? \n \nVOS nodes configured with IPsec VPN profiles of type controller-staging-sdwan or remote-access-server using a WAN interface as the IPsec endpoint are vulnerable. (IPsec profiles configured with an overlay interface as the IPsec endpoint are not affected.) This configuration typically applies to all Controllers, Hub Controllers, and SSE Gateways. Additionally, site-to-site VPN profiles configured without a peer IP address, hostname, or FQDN are also vulnerable. \n \nWhat is not impacted?  \n \nThe VOS nodes listed above are not vulnerable if they are not accessible from the Internet.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://security-portal.versa-networks.com/emailbulletins/6a663c9aabeebad826bc8d29","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}