NS
Product
Network Services Orchestrator
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 3Low 0
Watch
Add Network Services Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32433 In wildKEV | 10.0 | Apr 16 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE Affected: before 5.7.19.1; 5.8 before 6.1.16.2; 6.2 before 6.2.11.1; 6.3 before 6.3.8.1; 6.4 before 6.4.1.1; 6.4.2 before 6.4.4.1 |
| CVE-2024-20381 | 8.8 | Sep 11 | A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical… Affected: 4.4.1; 4.5.1; 4.7.1; 4.7.3; 5.1.1.1; 5.1.1.3; +34 more |
| CVE-2018-0274 | 8.8 | Jun 7 | A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to execute arbitrary shell commands with the… Affected: 4.1 through 4.1.6.0; 4.2 through 4.2.4.0; 4.3 through 4.3.3.0; 4.4 through 4.4.2.0 |
| CVE-2024-20366 | 7.8 | May 15 | A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated,… Affected: 5.0 before 5.0.5; 6.0 before 6.0.2 |
| CVE-2021-1572 | 7.8 | Aug 4 | A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account under which ConfD is running, which is commonly… Affected: 5.4 through 5.4.3.1; 5.5 through 5.5.2.2 |
| CVE-2021-1132 | 7.5 | Nov 18 | A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to… Affected: 5.3.1; 5.4; 5.4.0.1; 5.4.0.2 |
| CVE-2018-0463 | 7.5 | Oct 5 | A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain… Affected: 1.2.0 |
| CVE-2024-20369 | 6.1 | May 15 | A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to… Affected: 5.4 before 5.5.10.1; 5.6 before 5.6.14.3; 5.7 before 5.7.15; 5.8 before 5.8.13.1; 6.0 before 6.0.12; 6.1 before 6.1.7; +1 more |
| CVE-2023-20040 | 5.5 | Jan 20 | A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service (DoS) on an affected… Affected: 3.3 before 5.4.7; 5.5 before 5.5.6; 5.6 before 5.6.7; 5.7 before 5.7.4; 5.8 |
| CVE-2020-3362 | 4.7 | Jun 18 | A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to access confidential information on an affected device Affected: before 4.7.7.3; 5.1.0.1 before 5.1.4.2 |
Showing 10