VulnRadar

Data against noise.

Built with NaN
Page generated: 11 Nov 2026, 12:20 UTC
← Dashboard

CVE-2024-39717

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favic…

Read full description
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite Icon) option can be mis-used to upload a malicious file ending with .png extension to masquerade as image file. This is possible only after a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin has successfully authenticated and logged in.
CVSS 6.6 (MEDIUM) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
1.9/10
REALITY · THREAT PRIORITY
8.0/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 6.6: +0.99
  • Fresh EPSS: 3.99%: +0.02

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)
50/100
Press, 30 days (60%)
10/100
Grounded branding (15%)
0/100
HYPE TOTAL18/100

Sources and documents

Help Net Security
Press · 29 Oct 2026, 13:42 · Volt Typhoon targeted enterprise control planes via ever-changing "Silent Train" relay network - Help Net Security
www.tokenpost.com
Press · 29 Oct 2026, 02:14 · Lumen Links Volt Typhoon to Four Silent Train Zero-Day Campaigns - www.tokenpost.com
Field Effect
Press · 28 Aug 2024, 07:00 · MSPs and ISPs breached with Versa Director zero-day vulnerability - Field Effect
TechTarget
Press · 28 Aug 2024, 07:00 · Volt Typhoon exploiting Versa Director zero-day flaw - TechTarget
The Record from Recorded Future News
Press · 27 Aug 2024, 07:00 · China’s Volt Typhoon reportedly targets US internet providers using Versa zero-day - The Record from Recorded Future News
See all 11 source documents
Krebs on Security
Press · 27 Aug 2024, 07:00 · New 0-Day Attacks Linked to China’s ‘Volt Typhoon’ - Krebs on Security
Security Affairs
Press · 27 Aug 2024, 07:00 · China-linked APT Volt Typhoon exploited a zero-day in Versa Director - Security Affairs
Help Net Security
Press · 27 Aug 2024, 07:00 · Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717) - Help Net Security
The Hacker News
Press · 27 Aug 2024, 07:00 · Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors - The Hacker News
Lumen Technologies
Press · 27 Aug 2024, 07:00 · Taking the crossroads: the Versa director zero-day exploitation - Lumen Technologies
SecurityWeek
Press · 26 Aug 2024, 07:00 · China’s Volt Typhoon Hackers Caught Exploiting Zero-Day in Servers Used by ISPs, MSPs - SecurityWeek

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 1.9 · reality 8.0 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 6.6; EPSS 4.0%
Attention, last 30 days
2 distinct story titles; 2 press documents; 1 publisher domains.
Technical potential
network access, high privileges, no user interaction, additional attack conditions.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:15.790101+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
22 Aug 2024, 18:47
Added to the CISA KEV catalog
23 Aug 2024, 00:00
First press mention
26 Aug 2024, 07:00
Latest press mention
29 Oct 2026, 13:42
Score calculated
05 Nov 2026, 13:59
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar