Cisco Crosswork Network Services Orchestrator vulnerabilities
2 known vulnerabilities affecting cisco/crosswork_network_services_orchestrator.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2024-20326P3HIGHCVSS 7.8≥ 5.3.5, < 5.4≥ 5.4.5, < 5.5+10 more2024-05-16
CVE-2024-20326 [HIGH] CWE-78 CVE-2024-20326: A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could al
A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.
This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could expl
nvd
CVE-2024-20389P3HIGHCVSS 7.8v6.2.1v6.0.112024-05-16
CVE-2024-20389 [HIGH] CWE-266 CVE-2024-20389: A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could al
A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.
This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exp
nvd