CVE-2026-20188— Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability

A vulnerability in the connection-handling mechanism of Cisco Crosswork Network Controller (CNC) and Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an inadequate implementation of rate-limiting on incoming network connections. An attacker could exploit this vulnerability by sending a large number of connection requests to an affected system. A successful exploit could allow the attacker to exhaust available connection resources, causing Cisco CNC and Cisco NSO to become unresponsive and resulting in a DoS condition for legitimate users and dependent services. A manual reboot of the system is required to recover from this condition.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

未加控制的资源消耗(资源穷尽)

Cisco Network Services Orchestrator和Cisco Crosswork Network Controller 资源管理错误漏洞

Cisco Network Services Orchestrator（NSO）和Cisco Crosswork Network Controller都是美国思科（Cisco）公司的产品。Cisco Network Services Orchestrator是一套网络自动化服务解决方案。Cisco Crosswork Network Controller是一个网络控制器。 Cisco Crosswork Network Controller和Cisco Network Services Orchestra

N/A

N/A