Skip to main content

Confd Basic

3 CVEs product

Monthly

CVE-2025-32433 Apr 16, 22:15 CRITICAL POC KEV PATCH THREAT Act Now

Erlang/OTP SSH server allows unauthenticated remote code execution by exploiting a flaw in SSH protocol message handling, enabling unauthorized system access with CVSS 10.0.

Authentication Bypass RCE Cisco Debian Debian Linux +24
NVD GitHub
CVSS 3.1
10.0
EPSS
50.3%
Threat
6.5
CVE-2024-20389 May 16, 14:15 HIGH This Week

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Confd Basic Crosswork Network Services Orchestrator
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-20326 May 16, 14:15 HIGH This Week

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Cisco Confd Basic Confd Premium Crosswork Network Services Orchestrator
NVD
CVSS 3.1
7.8
EPSS
0.3%
EPSS 50% 6.5 CVSS 10.0
CRITICAL POC KEV PATCH THREAT Act Now

Erlang/OTP SSH server allows unauthenticated remote code execution by exploiting a flaw in SSH protocol message handling, enabling unauthorized system access with CVSS 10.0.

Authentication Bypass RCE Cisco +26
NVD GitHub
EPSS 0% CVSS 7.8
HIGH This Week

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Confd Basic +1
NVD
EPSS 0% CVSS 7.8
HIGH This Week

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Cisco Confd Basic +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy