NS
Product
Network Services Orchestrator
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 3Low 0
Watch
Add Network Services Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20381 | 8.8 | Sep 11 | A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical… Affected: 4.4.1; 4.5.1; 4.7.1; 4.7.3; 5.1.1.1; 5.1.1.3; +34 more |
| CVE-2018-0274 | 8.8 | Jun 7 | A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to execute arbitrary shell commands with the… Affected: 4.1 through 4.1.6.0; 4.2 through 4.2.4.0; 4.3 through 4.3.3.0; 4.4 through 4.4.2.0 |
| CVE-2024-20366 | 7.8 | May 15 | A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated,… Affected: 5.0 before 5.0.5; 6.0 before 6.0.2 |
| CVE-2021-1572 | 7.8 | Aug 4 | A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account under which ConfD is running, which is commonly… Affected: 5.4 through 5.4.3.1; 5.5 through 5.5.2.2 |
| CVE-2021-1132 | 7.5 | Nov 18 | A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to… Affected: 5.3.1; 5.4; 5.4.0.1; 5.4.0.2 |
| CVE-2018-0463 | 7.5 | Oct 5 | A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain… Affected: 1.2.0 |
Showing 6