Three zero-days could have allowed an attacker to completely compromise the Concerto application and the host system running it.
Source: htdarkreading.com