network services orchestrator vulnerabilities and fixes

Recent CVEs affecting network services orchestrator, with upgrade or downgrade steps. 3 tracked.

Also searched as: networkservicesorchestrator.

network services orchestrator has 3 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2025-04-16. Highest priority: CVE-2025-32433 (score 98/100).

• CVE-2025-32433 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
• CVE-2024-20381 HIGH 8.8 MITIGATE DOWNGRADE A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD t
• CVE-2021-1132 MEDIUM 5.3 DOWNGRADE A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orches

FAQ

How do I fix network services orchestrator vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is network services orchestrator being exploited right now?

Yes: 1 network services orchestrator CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which network services orchestrator CVE should I patch first?

CVE-2025-32433 currently ranks highest (98/100): Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability.

RSS feed for network services orchestrator · ← Back to latest CVEs