Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory (Cisco Cisco Crosswork Network Change Automation)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.31 % · percentile 24 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Awaiting Analysis
Description
Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator (NSO), additional information has been made available to the Cisco Product Security Incident Response Team (PSIRT). Upon further analysis, the Cisco PSIRT has reclassified this issue as a customer-configurable, resource management issue rather than a security vulnerability.
Weaknesses (CWE)
- CWE-400 — Uncontrolled Resource Consumption
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | NONE 0.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N | cisco |
| CVSS 3.1 | NONE 0.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N | NVD · psirt@cisco.com (Secondary) |
European references
- ENISA EUVD · EUVD-2026-27860
- GCVE · GCVE-0-2026-20188
CERT-FR advisories
- CERTFR-2026-AVI-0544 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Crosswork Network Change Automation |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |