CVE-2024-20381

HIGH 8.8CVE-2024-20381 · Published 11/09/2024 · updated 17/06/2026

In short

CVE-2024-20381 is a HIGH (CVSS 8.8) vulnerability affecting network services orchestrator (cisco).
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 47.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
network services orchestrator cisco	`= 4.4.1= 4.5.1= 4.7.1= 4.7.3= 5.1.1.1= 5.1.1.3= 5.1.2= 5.1.4.3= 5.2.0.3= 5.2.0.4= 5.2.1= 5.2.1.1= 5.2.3.2= 5.3.1= 5.3.4.3= 5.4= 5.4.0.1= 5.4.0.2= 5.4.1= 5.4.1.1= 5.4.2= 5.4.2.1= 5.4.2.2= 5.4.3= 5.4.3.1= 5.4.3.2= 5.4.3.3= 5.4.3.4= 5.4.4= 5.4.4.1= 5.4.4.2= 5.4.4.3= 5.4.5= 5.4.5.1= 5.4.5.2= 5.4.6= 5.4.7= 5.4.7.1= 5.5= 5.5.1= 5.5.10= 5.5.2= 5.5.2.1= 5.5.2.10= 5.5.2.11= 5.5.2.12= 5.5.2.2= 5.5.2.3= 5.5.2.4= 5.5.2.5= 5.5.2.6= 5.5.2.7= 5.5.2.8= 5.5.2.9= 5.5.3= 5.5.3.1= 5.5.4= 5.5.4.1= 5.5.5= 5.5.6= 5.5.6.1= 5.5.7= 5.5.8= 5.5.9= 5.6= 5.6.1= 5.6.10= 5.6.11= 5.6.12= 5.6.13= 5.6.14= 5.6.14.1= 5.6.2= 5.6.3= 5.6.3.1= 5.6.4= 5.6.5= 5.6.6= 5.6.6.1= 5.6.7= 5.6.7.1= 5.6.7.2= 5.6.8= 5.6.8.1= 5.6.9`

Description

A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the configuration of an affected application or device.  This vulnerability is due to improper authorization checks on the API. An attacker with privileges sufficient to access the affected application or device could exploit this vulnerability by sending malicious requests to the JSON-RPC API. A successful exploit could allow the attacker to make unauthorized modifications to the configuration of the affected application or device, including creating new user accounts or elevating their own privileges on an affected system.

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-auth-bypass-QnTEesp · Vendor Advisory

More vulnerabilities in network services orchestrator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package	Affected versions	Patched versions
network services orchestrator cisco	`= 4.4.1= 4.5.1= 4.7.1= 4.7.3= 5.1.1.1= 5.1.1.3= 5.1.2= 5.1.4.3= 5.2.0.3= 5.2.0.4= 5.2.1= 5.2.1.1= 5.2.3.2= 5.3.1= 5.3.4.3= 5.4= 5.4.0.1= 5.4.0.2= 5.4.1= 5.4.1.1= 5.4.2= 5.4.2.1= 5.4.2.2= 5.4.3= 5.4.3.1= 5.4.3.2= 5.4.3.3= 5.4.3.4= 5.4.4= 5.4.4.1= 5.4.4.2= 5.4.4.3= 5.4.5= 5.4.5.1= 5.4.5.2= 5.4.6= 5.4.7= 5.4.7.1= 5.5= 5.5.1= 5.5.10= 5.5.2= 5.5.2.1= 5.5.2.10= 5.5.2.11= 5.5.2.12= 5.5.2.2= 5.5.2.3= 5.5.2.4= 5.5.2.5= 5.5.2.6= 5.5.2.7= 5.5.2.8= 5.5.2.9= 5.5.3= 5.5.3.1= 5.5.4= 5.5.4.1= 5.5.5= 5.5.6= 5.5.6.1= 5.5.7= 5.5.8= 5.5.9= 5.6= 5.6.1= 5.6.10= 5.6.11= 5.6.12= 5.6.13= 5.6.14= 5.6.14.1= 5.6.2= 5.6.3= 5.6.3.1= 5.6.4= 5.6.5= 5.6.6= 5.6.6.1= 5.6.7= 5.6.7.1= 5.6.7.2= 5.6.8= 5.6.8.1= 5.6.9`

Package

Affected versions

Patched versions

network services orchestrator

cisco

= 4.4.1= 4.5.1= 4.7.1= 4.7.3= 5.1.1.1= 5.1.1.3= 5.1.2= 5.1.4.3= 5.2.0.3= 5.2.0.4= 5.2.1= 5.2.1.1= 5.2.3.2= 5.3.1= 5.3.4.3= 5.4= 5.4.0.1= 5.4.0.2= 5.4.1= 5.4.1.1= 5.4.2= 5.4.2.1= 5.4.2.2= 5.4.3= 5.4.3.1= 5.4.3.2= 5.4.3.3= 5.4.3.4= 5.4.4= 5.4.4.1= 5.4.4.2= 5.4.4.3= 5.4.5= 5.4.5.1= 5.4.5.2= 5.4.6= 5.4.7= 5.4.7.1= 5.5= 5.5.1= 5.5.10= 5.5.2= 5.5.2.1= 5.5.2.10= 5.5.2.11= 5.5.2.12= 5.5.2.2= 5.5.2.3= 5.5.2.4= 5.5.2.5= 5.5.2.6= 5.5.2.7= 5.5.2.8= 5.5.2.9= 5.5.3= 5.5.3.1= 5.5.4= 5.5.4.1= 5.5.5= 5.5.6= 5.5.6.1= 5.5.7= 5.5.8= 5.5.9= 5.6= 5.6.1= 5.6.10= 5.6.11= 5.6.12= 5.6.13= 5.6.14= 5.6.14.1= 5.6.2= 5.6.3= 5.6.3.1= 5.6.4= 5.6.5= 5.6.6= 5.6.6.1= 5.6.7= 5.6.7.1= 5.6.7.2= 5.6.8= 5.6.8.1= 5.6.9

Description

More vulnerabilities in network services orchestrator

See all →