CVE-2024-20286 - Vulnerability Details

Description

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device.

The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. 
Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Published: 2024-08-28

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco NX-OS Software

unknown

Version	Status	Constraints
`8.2(5)`	affected	—
`7.3(5)D1(1)`	affected	—
`8.4(2)`	affected	—
`6.2(2)`	affected	—
`8.4(3)`	affected	—
`9.2(3)`	affected	—
`7.0(3)I5(2)`	affected	—
`8.2(1)`	affected	—
`6.0(2)A8(7a)`	affected	—
`7.0(3)I4(5)`	affected	—
`6.0(2)A6(1)`	affected	—
`7.3(1)D1(1)`	affected	—
`6.2(14a)`	affected	—
`7.0(3)I4(6)`	affected	—
`7.0(3)I4(3)`	affected	—
`9.2(2v)`	affected	—
`6.0(2)A6(5b)`	affected	—
`7.3(0)D1(1)`	affected	—
`6.2(17a)`	affected	—
`7.0(3)I4(7)`	affected	—
`6.0(2)U6(1a)`	affected	—
`7.0(3)I4(1)`	affected	—
`7.0(3)I4(8)`	affected	—
`7.0(3)I4(2)`	affected	—
`7.0(3)IM3(1)`	affected	—
`6.0(2)U6(5a)`	affected	—
`6.0(2)A8(11)`	affected	—
`6.0(2)A6(4a)`	affected	—
`6.2(9)`	affected	—
`6.2(5)`	affected	—
`7.3(4)D1(1)`	affected	—
`6.2(20)`	affected	—
`9.2(1)`	affected	—
`9.2(2t)`	affected	—
`9.2(3y)`	affected	—
`7.0(3)I4(1t)`	affected	—
`6.0(2)U6(5c)`	affected	—
`6.0(2)A6(4)`	affected	—
`7.0(3)I7(6z)`	affected	—
`9.3(2)`	affected	—
`7.3(1)DY(1)`	affected	—
`7.0(3)F3(3)`	affected	—
`6.0(2)U6(6)`	affected	—
`6.2(29)`	affected	—
`7.0(3)I7(3z)`	affected	—
`7.0(3)IM7(2)`	affected	—
`6.0(2)A8(11b)`	affected	—
`6.2(9a)`	affected	—
`7.0(3)I7(5a)`	affected	—
`6.2(11d)`	affected	—
`8.1(1)`	affected	—
`7.0(3)I6(1)`	affected	—
`6.0(2)U6(10)`	affected	—
`7.2(2)D1(2)`	affected	—
`7.0(3)IM3(2)`	affected	—
`6.0(2)A6(8)`	affected	—
`8.2(2)`	affected	—
`6.0(2)U6(1)`	affected	—
`7.0(3)I5(3b)`	affected	—
`8.3(2)`	affected	—
`6.0(2)A6(2a)`	affected	—
`6.2(27)`	affected	—
`7.3(2)D1(3a)`	affected	—
`6.0(2)U6(7)`	affected	—
`9.2(4)`	affected	—
`7.0(3)IM3(2a)`	affected	—
`6.2(8b)`	affected	—
`6.0(2)A8(10)`	affected	—
`6.2(13)`	affected	—
`6.0(2)A8(2)`	affected	—
`7.0(3)IC4(4)`	affected	—
`6.2(1)`	affected	—
`8.1(2)`	affected	—
`6.0(2)A6(3)`	affected	—
`6.0(2)U6(5b)`	affected	—
`7.0(3)F3(3c)`	affected	—
`7.3(3)D1(1)`	affected	—
`7.0(3)F3(1)`	affected	—
`6.0(2)U6(5)`	affected	—
`7.0(3)F3(5)`	affected	—
`8.2(3)`	affected	—
`6.0(2)A6(7)`	affected	—
`7.0(3)I7(2)`	affected	—
`6.2(5a)`	affected	—
`6.2(18)`	affected	—
`6.0(2)A6(5)`	affected	—
`7.0(3)IM3(2b)`	affected	—
`6.0(2)U6(4a)`	affected	—
`7.0(3)I5(3)`	affected	—
`7.0(3)I7(3)`	affected	—
`6.0(2)A8(6)`	affected	—
`7.0(3)I6(2)`	affected	—
`8.3(1)`	affected	—
`6.2(3)`	affected	—
`6.2(22)`	affected	—
`8.4(1)`	affected	—
`8.1(1b)`	affected	—
`7.2(2)D1(4)`	affected	—
`6.0(2)A8(5)`	affected	—
`7.3(0)DX(1)`	affected	—
`7.3(2)D1(1)`	affected	—
`6.0(2)U6(8)`	affected	—
`7.0(3)IM3(3)`	affected	—
`9.3(1)`	affected	—
`6.0(2)U6(2)`	affected	—
`6.2(9b)`	affected	—
`6.0(2)A8(7)`	affected	—
`7.0(3)I7(6)`	affected	—
`7.3(2)D1(2)`	affected	—
`6.2(25)`	affected	—
`6.0(2)U6(3a)`	affected	—
`8.0(1)`	affected	—
`6.0(2)A8(11a)`	affected	—
`6.2(11e)`	affected	—
`7.0(3)I4(8z)`	affected	—
`6.2(11)`	affected	—
`7.0(3)I4(9)`	affected	—
`6.2(16)`	affected	—
`6.2(19)`	affected	—
`8.2(4)`	affected	—
`6.2(2a)`	affected	—
`7.2(2)D1(3)`	affected	—
`7.0(3)I7(4)`	affected	—
`7.0(3)I7(7)`	affected	—
`6.2(5b)`	affected	—
`7.3(0)DY(1)`	affected	—
`6.0(2)A8(9)`	affected	—
`6.0(2)A8(1)`	affected	—
`7.2(1)D1(1)`	affected	—
`6.2(15)`	affected	—
`6.0(2)A6(6)`	affected	—
`6.0(2)A8(10a)`	affected	—
`7.0(3)I5(1)`	affected	—
`9.3(1z)`	affected	—
`9.2(2)`	affected	—
`6.2(7)`	affected	—
`6.2(9c)`	affected	—
`7.0(3)F3(4)`	affected	—
`6.2(6b)`	affected	—
`7.0(3)I4(8b)`	affected	—
`8.1(2a)`	affected	—
`7.3(2)D1(3)`	affected	—
`6.2(8)`	affected	—
`6.0(2)A8(3)`	affected	—
`6.2(11b)`	affected	—
`7.0(3)I4(6t)`	affected	—
`7.0(3)I5(3a)`	affected	—
`8.1(1a)`	affected	—
`6.2(13a)`	affected	—
`6.0(2)A8(8)`	affected	—
`7.0(3)I7(5)`	affected	—
`7.0(3)F3(3a)`	affected	—
`6.0(2)A8(4)`	affected	—
`6.0(2)A6(3a)`	affected	—
`6.0(2)A6(5a)`	affected	—
`7.0(3)F2(1)`	affected	—
`7.0(3)I4(8a)`	affected	—
`6.0(2)U6(9)`	affected	—
`7.0(3)F3(2)`	affected	—
`6.0(2)U6(2a)`	affected	—
`6.2(12)`	affected	—
`6.2(17)`	affected	—
`7.0(3)I4(4)`	affected	—
`6.2(23)`	affected	—
`6.2(13b)`	affected	—
`6.0(2)U6(3)`	affected	—
`6.2(10)`	affected	—
`6.2(6a)`	affected	—
`6.2(6)`	affected	—
`6.2(14)`	affected	—
`7.0(3)I7(1)`	affected	—
`6.2(14b)`	affected	—
`6.2(21)`	affected	—
`7.2(2)D1(1)`	affected	—
`7.0(3)F2(2)`	affected	—
`7.0(3)IA7(2)`	affected	—
`7.0(3)IA7(1)`	affected	—
`6.0(2)A8(7b)`	affected	—
`6.2(8a)`	affected	—
`6.2(11c)`	affected	—
`7.0(3)F1(1)`	affected	—
`6.0(2)A6(1a)`	affected	—
`7.2(0)D1(1)`	affected	—
`6.0(2)A6(2)`	affected	—
`6.0(2)A8(4a)`	affected	—
`6.2(20a)`	affected	—
`6.0(2)U6(4)`	affected	—
`8.4(1a)`	affected	—
`9.3(3)`	affected	—
`7.3(2)D1(1d)`	affected	—
`6.2(24)`	affected	—
`6.2(31)`	affected	—
`7.0(3)I7(8)`	affected	—
`6.0(2)U6(10a)`	affected	—
`9.3(4)`	affected	—
`7.3(6)D1(1)`	affected	—
`6.2(26)`	affected	—
`8.2(6)`	affected	—
`6.2(33)`	affected	—
`9.3(5)`	affected	—
`8.4(2a)`	affected	—
`8.4(2b)`	affected	—
`7.0(3)I7(9)`	affected	—
`6.2(24a)`	affected	—
`8.5(1)`	affected	—
`9.3(6)`	affected	—
`10.1(2)`	affected	—
`10.1(1)`	affected	—
`8.4(4)`	affected	—
`7.3(7)D1(1)`	affected	—
`8.4(2c)`	affected	—
`9.3(5w)`	affected	—
`8.2(7)`	affected	—
`9.3(7)`	affected	—
`9.3(7k)`	affected	—
`7.0(3)I7(9w)`	affected	—
`10.2(1)`	affected	—
`7.3(8)D1(1)`	affected	—
`9.3(7a)`	affected	—
`8.2(7a)`	affected	—
`9.3(8)`	affected	—
`8.4(4a)`	affected	—
`8.4(2d)`	affected	—
`8.4(5)`	affected	—
`7.0(3)I7(10)`	affected	—
`8.2(8)`	affected	—
`10.2(1q)`	affected	—
`10.2(2)`	affected	—
`9.3(9)`	affected	—
`10.1(2t)`	affected	—
`7.3(9)D1(1)`	affected	—
`10.2(3)`	affected	—
`8.4(6)`	affected	—
`10.2(3t)`	affected	—
`8.4(2e)`	affected	—
`9.3(10)`	affected	—
`10.2(2a)`	affected	—
`9.2(1a)`	affected	—
`8.2(9)`	affected	—
`10.3(1)`	affected	—
`10.2(4)`	affected	—
`8.4(7)`	affected	—
`10.3(2)`	affected	—
`8.4(6a)`	affected	—
`9.3(11)`	affected	—
`10.3(3)`	affected	—
`10.2(5)`	affected	—
`9.4(1)`	affected	—
`9.3(2a)`	affected	—
`8.4(2f)`	affected	—
`8.2(10)`	affected	—
`9.3(12)`	affected	—
`10.2(3v)`	affected	—
`10.4(1)`	affected	—
`8.4(8)`	affected	—
`10.3(99w)`	affected	—
`10.2(6)`	affected	—
`10.3(3w)`	affected	—
`10.3(99x)`	affected	—
`10.3(3o)`	affected	—
`8.4(9)`	affected	—
`10.3(4)`	affected	—
`10.3(3p)`	affected	—
`10.3(4a)`	affected	—
`9.4(1a)`	affected	—
`10.4(2)`	affected	—
`10.3(3q)`	affected	—
`9.3(13)`	affected	—
`10.2(7)`	affected	—
`10.3(3x)`	affected	—
`10.3(4g)`	affected	—
`10.3(3r)`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:cisco:nx-os:9.3\(13\):*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:n9k-c92160yc-x:-:::::::*
	cpe:2.3:h:cisco:n9k-c92300yc:-:::::::*
	cpe:2.3:h:cisco:n9k-c92304qc:-:::::::*
	cpe:2.3:h:cisco:n9k-c9232c:-:::::::*
	cpe:2.3:h:cisco:n9k-c92348gc-x:-:::::::*
	cpe:2.3:h:cisco:n9k-c9236c:-:::::::*
	cpe:2.3:h:cisco:n9k-c9272q:-:::::::*
	cpe:2.3:h:cisco:n9k-c93108tc-ex:-:::::::*
	cpe:2.3:h:cisco:n9k-c93108tc-fx:-:::::::*
	cpe:2.3:h:cisco:n9k-c93120tx:-:::::::*
	cpe:2.3:h:cisco:n9k-c93128tx:-:::::::*
	cpe:2.3:h:cisco:n9k-c9316d-gx:-:::::::*
	cpe:2.3:h:cisco:n9k-c93180lc-ex:-:::::::*
	cpe:2.3:h:cisco:n9k-c93180yc-ex:-:::::::*
	cpe:2.3:h:cisco:n9k-c93180yc-fx:-:::::::*
	cpe:2.3:h:cisco:n9k-c93180yc2-fx:-:::::::*
	cpe:2.3:h:cisco:n9k-c93216tc-fx2:-:::::::*
	cpe:2.3:h:cisco:n9k-c93240yc-fx2:-:::::::*
	cpe:2.3:h:cisco:n9k-c9332c:-:::::::*
	cpe:2.3:h:cisco:n9k-c9332d-gx2b:-:::::::*
	cpe:2.3:h:cisco:n9k-c9332pq:-:::::::*
	cpe:2.3:h:cisco:n9k-c93360yc-fx2:-:::::::*
	cpe:2.3:h:cisco:n9k-c9336c-fx2:-:::::::*
	cpe:2.3:h:cisco:n9k-c9348d-gx2a:-:::::::*
	cpe:2.3:h:cisco:n9k-c9348gc-fxp:-:::::::*
	cpe:2.3:h:cisco:n9k-c93600cd-gx:-:::::::*
	cpe:2.3:h:cisco:n9k-c9364c:-:::::::*
	cpe:2.3:h:cisco:n9k-c9364c-gx:-:::::::*
	cpe:2.3:h:cisco:n9k-c9364d-gx2a:-:::::::*
	cpe:2.3:h:cisco:n9k-c9372px:-:::::::*
	cpe:2.3:h:cisco:n9k-c9372px-e:-:::::::*
	cpe:2.3:h:cisco:n9k-c9372tx:-:::::::*
	cpe:2.3:h:cisco:n9k-c9372tx-e:-:::::::*
	cpe:2.3:h:cisco:n9k-c9396px:-:::::::*
	cpe:2.3:h:cisco:n9k-c9396tx:-:::::::*
	cpe:2.3:h:cisco:n9k-c9504:-:::::::*
	cpe:2.3:h:cisco:n9k-c9504-fm-r:-:::::::*
	cpe:2.3:h:cisco:n9k-c9508:-:::::::*
	cpe:2.3:h:cisco:n9k-c9508-fm-r:-:::::::*
	cpe:2.3:h:cisco:n9k-c9516:-:::::::*
	cpe:2.3:h:cisco:n9k-sc-a:-:::::::*
	cpe:2.3:h:cisco:n9k-sup-a:-:::::::*
	cpe:2.3:h:cisco:n9k-sup-a\+:-:::::::*
	cpe:2.3:h:cisco:n9k-sup-b:-:::::::*
	cpe:2.3:h:cisco:n9k-sup-b\+:-:::::::*
	cpe:2.3:h:cisco:n9k-x9400-16w:-:::::::*
	cpe:2.3:h:cisco:n9k-x9400-22l:-:::::::*
	cpe:2.3:h:cisco:n9k-x9400-8d:-:::::::*
	cpe:2.3:h:cisco:n9k-x9432c-s:-:::::::*
	cpe:2.3:h:cisco:n9k-x9464px:-:::::::*
	cpe:2.3:h:cisco:n9k-x9464tx2:-:::::::*
	cpe:2.3:h:cisco:n9k-x9564px:-:::::::*
	cpe:2.3:h:cisco:n9k-x9564tx:-:::::::*
	cpe:2.3:h:cisco:n9k-x96136yc-r:-:::::::*
	cpe:2.3:h:cisco:n9k-x9636c-r:-:::::::*
	cpe:2.3:h:cisco:n9k-x9636c-rx:-:::::::*
	cpe:2.3:h:cisco:n9k-x9636q-r:-:::::::*
	cpe:2.3:h:cisco:n9k-x97160yc-ex:-:::::::*
	cpe:2.3:h:cisco:n9k-x97284yc-fx:-:::::::*
	cpe:2.3:h:cisco:n9k-x9732c-ex:-:::::::*
	cpe:2.3:h:cisco:n9k-x9732c-fx:-:::::::*
	cpe:2.3:h:cisco:n9k-x9736c-ex:-:::::::*
	cpe:2.3:h:cisco:n9k-x9736c-fx:-:::::::*
	cpe:2.3:h:cisco:n9k-x9788tc-fx:-:::::::*
cpe:2.3:h:cisco:nexus_3000:-:::::::*
cpe:2.3:h:cisco:nexus_3000_series:-:::::::*
cpe:2.3:h:cisco:nexus_3016:-:::::::*
cpe:2.3:h:cisco:nexus_3016q:-:::::::*
cpe:2.3:h:cisco:nexus_3048:-:::::::*
cpe:2.3:h:cisco:nexus_3064:-:::::::*
cpe:2.3:h:cisco:nexus_3064-32t:-:::::::*
cpe:2.3:h:cisco:nexus_3064-t:-:::::::*
cpe:2.3:h:cisco:nexus_3064-x:-:::::::*
cpe:2.3:h:cisco:nexus_3064t:-:::::::*
cpe:2.3:h:cisco:nexus_3064x:-:::::::*
cpe:2.3:h:cisco:nexus_3100:-:::::::*
cpe:2.3:h:cisco:nexus_3100-v:-:::::::*
cpe:2.3:h:cisco:nexus_3100-z:-:::::::*
cpe:2.3:h:cisco:nexus_3100v:-:::::::*
cpe:2.3:h:cisco:nexus_31108pc-v:-:::::::*
cpe:2.3:h:cisco:nexus_31108pv-v:-:::::::*
cpe:2.3:h:cisco:nexus_31108tc-v:-:::::::*
cpe:2.3:h:cisco:nexus_31128pq:-:::::::*
cpe:2.3:h:cisco:nexus_3132c-z:-:::::::*
cpe:2.3:h:cisco:nexus_3132q:-:::::::*
cpe:2.3:h:cisco:nexus_3132q-v:-:::::::*
cpe:2.3:h:cisco:nexus_3132q-x:-:::::::*
cpe:2.3:h:cisco:nexus_3132q-x\/3132q-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3132q-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3164q:-:::::::*
cpe:2.3:h:cisco:nexus_3172:-:::::::*
cpe:2.3:h:cisco:nexus_3172pq:-:::::::*
cpe:2.3:h:cisco:nexus_3172pq-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3172pq\/pq-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3172tq:-:::::::*
cpe:2.3:h:cisco:nexus_3172tq-32t:-:::::::*
cpe:2.3:h:cisco:nexus_3172tq-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3200:-:::::::*
cpe:2.3:h:cisco:nexus_3232:-:::::::*
cpe:2.3:h:cisco:nexus_3232c:-:::::::*
cpe:2.3:h:cisco:nexus_3232c_:-:::::::*
cpe:2.3:h:cisco:nexus_3264c-e:-:::::::*
cpe:2.3:h:cisco:nexus_3264q:-:::::::*
cpe:2.3:h:cisco:nexus_3400:-:::::::*
cpe:2.3:h:cisco:nexus_3408-s:-:::::::*
cpe:2.3:h:cisco:nexus_34180yc:-:::::::*
cpe:2.3:h:cisco:nexus_34200yc-sm:-:::::::*
cpe:2.3:h:cisco:nexus_3432d-s:-:::::::*
cpe:2.3:h:cisco:nexus_3464c:-:::::::*
cpe:2.3:h:cisco:nexus_3500:-:::::::*
cpe:2.3:h:cisco:nexus_3500_platform:-:::::::*
cpe:2.3:h:cisco:nexus_3524:-:::::::*
cpe:2.3:h:cisco:nexus_3524-x:-:::::::*
cpe:2.3:h:cisco:nexus_3524-x\/xl:-:::::::*
cpe:2.3:h:cisco:nexus_3524-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3548:-:::::::*
cpe:2.3:h:cisco:nexus_3548-x:-:::::::*
cpe:2.3:h:cisco:nexus_3548-x\/xl:-:::::::*
cpe:2.3:h:cisco:nexus_3548-xl:-:::::::*
cpe:2.3:h:cisco:nexus_3600:-:::::::*
cpe:2.3:h:cisco:nexus_36180yc-r:-:::::::*
cpe:2.3:h:cisco:nexus_3636c-r:-:::::::*
cpe:2.3:h:cisco:nexus_9000:-:::::::*
cpe:2.3:h:cisco:nexus_9000_in_aci_mode:-:::::::*
cpe:2.3:h:cisco:nexus_9000_in_standalone:-:::::::*
cpe:2.3:h:cisco:nexus_9000_in_standalone_nx-os_mode:-:::::::*
cpe:2.3:h:cisco:nexus_9000v:-:::::::*
cpe:2.3:h:cisco:nexus_9200:-:::::::*
cpe:2.3:h:cisco:nexus_9200yc:-:::::::*
cpe:2.3:h:cisco:nexus_92160yc-x:-:::::::*
cpe:2.3:h:cisco:nexus_92160yc_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9221c:-:::::::*
cpe:2.3:h:cisco:nexus_92300yc:-:::::::*
cpe:2.3:h:cisco:nexus_92300yc_switch:-:::::::*
cpe:2.3:h:cisco:nexus_92304qc:-:::::::*
cpe:2.3:h:cisco:nexus_92304qc_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9232e:-:::::::*
cpe:2.3:h:cisco:nexus_92348gc-x:-:::::::*
cpe:2.3:h:cisco:nexus_9236c:-:::::::*
cpe:2.3:h:cisco:nexus_9236c_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9272q:-:::::::*
cpe:2.3:h:cisco:nexus_9272q_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9300:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-ex:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-ex_switch:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-fx:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-fx3:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-fx3h:-:::::::*
cpe:2.3:h:cisco:nexus_93108tc-fx3p:-:::::::*
cpe:2.3:h:cisco:nexus_93120tx:-:::::::*
cpe:2.3:h:cisco:nexus_93120tx_switch:-:::::::*
cpe:2.3:h:cisco:nexus_93128:-:::::::*
cpe:2.3:h:cisco:nexus_93128tx:-:::::::*
cpe:2.3:h:cisco:nexus_93128tx_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9316d-gx:-:::::::*
cpe:2.3:h:cisco:nexus_93180lc-ex:-:::::::*
cpe:2.3:h:cisco:nexus_93180lc-ex_switch:-:::::::*
cpe:2.3:h:cisco:nexus_93180tc-ex:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-ex:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-ex_switch:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-fx:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-fx3:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-fx3h:-:::::::*
cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:::::::*
cpe:2.3:h:cisco:nexus_93216tc-fx2:-:::::::*
cpe:2.3:h:cisco:nexus_93240tc-fx2:-:::::::*
cpe:2.3:h:cisco:nexus_93240yc-fx2:-:::::::*
cpe:2.3:h:cisco:nexus_9332c:-:::::::*
cpe:2.3:h:cisco:nexus_9332d-gx2b:-:::::::*
cpe:2.3:h:cisco:nexus_9332d-h2r:-:::::::*
cpe:2.3:h:cisco:nexus_9332pq:-:::::::*
cpe:2.3:h:cisco:nexus_9332pq_switch:-:::::::*
cpe:2.3:h:cisco:nexus_93360yc-fx2:-:::::::*
cpe:2.3:h:cisco:nexus_9336c-fx2:-:::::::*
cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:::::::*
cpe:2.3:h:cisco:nexus_9336pq:-:::::::*
cpe:2.3:h:cisco:nexus_9336pq_aci:-:::::::*
cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:::::::*
cpe:2.3:h:cisco:nexus_9336pq_aci_spine_switch:-:::::::*
cpe:2.3:h:cisco:nexus_93400ld-h1:-:::::::*
cpe:2.3:h:cisco:nexus_9348d-gx2a:-:::::::*
cpe:2.3:h:cisco:nexus_9348gc-fx3:-:::::::*
cpe:2.3:h:cisco:nexus_9348gc-fx3ph:-:::::::*
cpe:2.3:h:cisco:nexus_9348gc-fxp:-:::::::*
cpe:2.3:h:cisco:nexus_93600cd-gx:-:::::::*
cpe:2.3:h:cisco:nexus_9364c:-:::::::*
cpe:2.3:h:cisco:nexus_9364c-gx:-:::::::*
cpe:2.3:h:cisco:nexus_9364c-h1:-:::::::*
cpe:2.3:h:cisco:nexus_9364d-gx2a:-:::::::*
cpe:2.3:h:cisco:nexus_9372px:-:::::::*
cpe:2.3:h:cisco:nexus_9372px-e:-:::::::*
cpe:2.3:h:cisco:nexus_9372px-e_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9372px_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9372tx:-:::::::*
cpe:2.3:h:cisco:nexus_9372tx-e:-:::::::*
cpe:2.3:h:cisco:nexus_9372tx-e_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9372tx_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9396px:-:::::::*
cpe:2.3:h:cisco:nexus_9396px_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9396tx:-:::::::*
cpe:2.3:h:cisco:nexus_9396tx_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9408:-:::::::*
cpe:2.3:h:cisco:nexus_9432pq:-:::::::*
cpe:2.3:h:cisco:nexus_9500:-:::::::*
cpe:2.3:h:cisco:nexus_9500_16-slot:-:::::::*
cpe:2.3:h:cisco:nexus_9500_4-slot:-:::::::*
cpe:2.3:h:cisco:nexus_9500_8-slot:-:::::::*
cpe:2.3:h:cisco:nexus_9500_supervisor_a:-:::::::*
cpe:2.3:h:cisco:nexus_9500_supervisor_a\+:-:::::::*
cpe:2.3:h:cisco:nexus_9500_supervisor_b:-:::::::*
cpe:2.3:h:cisco:nexus_9500_supervisor_b\+:-:::::::*
cpe:2.3:h:cisco:nexus_9500r:-:::::::*
cpe:2.3:h:cisco:nexus_9504:-:::::::*
cpe:2.3:h:cisco:nexus_9504_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9508:-:::::::*
cpe:2.3:h:cisco:nexus_9508_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9516:-:::::::*
cpe:2.3:h:cisco:nexus_9516_switch:-:::::::*
cpe:2.3:h:cisco:nexus_9536pq:-:::::::*
cpe:2.3:h:cisco:nexus_9636pq:-:::::::*
cpe:2.3:h:cisco:nexus_9716d-gx:-:::::::*
cpe:2.3:h:cisco:nexus_9736pq:-:::::::*
cpe:2.3:h:cisco:nexus_9800:-:::::::*
cpe:2.3:h:cisco:nexus_9800_34-port_100g_and_14-port_400g_line_card:-:::::::*
cpe:2.3:h:cisco:nexus_9800_36-port_400g_line_card:-:::::::*
cpe:2.3:h:cisco:nexus_9804:-:::::::*
cpe:2.3:h:cisco:nexus_9808:-:::::::*

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2024-18001	A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00103.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-psbe-ce-YvbTn5du
https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/105x/programmability/cisco-nexus-9000-series-nx-os-programmability-guide-105x/m-n9k-python-api-101x.html?bookSearch=true#concept_A2CFF094ADCB414C983EA06AD8E9A410

History

Tue, 22 Oct 2024 15:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco n9k-c92160yc-x Cisco n9k-c92300yc Cisco n9k-c92304qc Cisco n9k-c9232c Cisco n9k-c92348gc-x Cisco n9k-c9236c Cisco n9k-c9272q Cisco n9k-c93108tc-ex Cisco n9k-c93108tc-fx Cisco n9k-c93120tx Cisco n9k-c93128tx Cisco n9k-c9316d-gx Cisco n9k-c93180lc-ex Cisco n9k-c93180yc-ex Cisco n9k-c93180yc-fx Cisco n9k-c93180yc2-fx Cisco n9k-c93216tc-fx2 Cisco n9k-c93240yc-fx2 Cisco n9k-c9332c Cisco n9k-c9332d-gx2b Cisco n9k-c9332pq Cisco n9k-c93360yc-fx2 Cisco n9k-c9336c-fx2 Cisco n9k-c9348d-gx2a Cisco n9k-c9348gc-fxp Cisco n9k-c93600cd-gx Cisco n9k-c9364c Cisco n9k-c9364c-gx Cisco n9k-c9364d-gx2a Cisco n9k-c9372px Cisco n9k-c9372px-e Cisco n9k-c9372tx Cisco n9k-c9372tx-e Cisco n9k-c9396px Cisco n9k-c9396tx Cisco n9k-c9504 Cisco n9k-c9504-fm-r Cisco n9k-c9508 Cisco n9k-c9508-fm-r Cisco n9k-c9516 Cisco n9k-sc-a Cisco n9k-sup-a Cisco n9k-sup-a\+ Cisco n9k-sup-b Cisco n9k-sup-b\+ Cisco n9k-x9400-16w Cisco n9k-x9400-22l Cisco n9k-x9400-8d Cisco n9k-x9432c-s Cisco n9k-x9464px Cisco n9k-x9464tx2 Cisco n9k-x9564px Cisco n9k-x9564tx Cisco n9k-x96136yc-r Cisco n9k-x9636c-r Cisco n9k-x9636c-rx Cisco n9k-x9636q-r Cisco n9k-x97160yc-ex Cisco n9k-x97284yc-fx Cisco n9k-x9732c-ex Cisco n9k-x9732c-fx Cisco n9k-x9736c-ex Cisco n9k-x9736c-fx Cisco n9k-x9788tc-fx Cisco nexus 3000 Cisco nexus 3000 Series Cisco nexus 3016 Cisco nexus 3016q Cisco nexus 3048 Cisco nexus 3064 Cisco nexus 3064-32t Cisco nexus 3064-t Cisco nexus 3064-x Cisco nexus 3064t Cisco nexus 3064x Cisco nexus 3100 Cisco nexus 3100-v Cisco nexus 3100-z Cisco nexus 3100v Cisco nexus 31108pc-v Cisco nexus 31108pv-v Cisco nexus 31108tc-v Cisco nexus 31128pq Cisco nexus 3132c-z Cisco nexus 3132q Cisco nexus 3132q-v Cisco nexus 3132q-x Cisco nexus 3132q-x\/3132q-xl Cisco nexus 3132q-xl Cisco nexus 3164q Cisco nexus 3172 Cisco nexus 3172pq Cisco nexus 3172pq-xl Cisco nexus 3172pq\/pq-xl Cisco nexus 3172tq Cisco nexus 3172tq-32t Cisco nexus 3172tq-xl Cisco nexus 3200 Cisco nexus 3232 Cisco nexus 3232c Cisco nexus 3232c Cisco nexus 3264c-e Cisco nexus 3264q Cisco nexus 3400 Cisco nexus 3408-s Cisco nexus 34180yc Cisco nexus 34200yc-sm Cisco nexus 3432d-s Cisco nexus 3464c Cisco nexus 3500 Cisco nexus 3500 Platform Cisco nexus 3524 Cisco nexus 3524-x Cisco nexus 3524-x\/xl Cisco nexus 3524-xl Cisco nexus 3548 Cisco nexus 3548-x Cisco nexus 3548-x\/xl Cisco nexus 3548-xl Cisco nexus 3600 Cisco nexus 36180yc-r Cisco nexus 3636c-r Cisco nexus 9000 Cisco nexus 9000 In Aci Mode Cisco nexus 9000 In Standalone Cisco nexus 9000 In Standalone Nx-os Mode Cisco nexus 9000v Cisco nexus 9200 Cisco nexus 9200yc Cisco nexus 92160yc-x Cisco nexus 92160yc Switch Cisco nexus 9221c Cisco nexus 92300yc Cisco nexus 92300yc Switch Cisco nexus 92304qc Cisco nexus 92304qc Switch Cisco nexus 9232e Cisco nexus 92348gc-x Cisco nexus 9236c Cisco nexus 9236c Switch Cisco nexus 9272q Cisco nexus 9272q Switch Cisco nexus 9300 Cisco nexus 93108tc-ex Cisco nexus 93108tc-ex-24 Cisco nexus 93108tc-ex Switch Cisco nexus 93108tc-fx Cisco nexus 93108tc-fx-24 Cisco nexus 93108tc-fx3 Cisco nexus 93108tc-fx3h Cisco nexus 93108tc-fx3p Cisco nexus 93120tx Cisco nexus 93120tx Switch Cisco nexus 93128 Cisco nexus 93128tx Cisco nexus 93128tx Switch Cisco nexus 9316d-gx Cisco nexus 93180lc-ex Cisco nexus 93180lc-ex Switch Cisco nexus 93180tc-ex Cisco nexus 93180yc-ex Cisco nexus 93180yc-ex-24 Cisco nexus 93180yc-ex Switch Cisco nexus 93180yc-fx Cisco nexus 93180yc-fx-24 Cisco nexus 93180yc-fx3 Cisco nexus 93180yc-fx3h Cisco nexus 93180yc-fx3s Cisco nexus 93216tc-fx2 Cisco nexus 93240tc-fx2 Cisco nexus 93240yc-fx2 Cisco nexus 9332c Cisco nexus 9332d-gx2b Cisco nexus 9332d-h2r Cisco nexus 9332pq Cisco nexus 9332pq Switch Cisco nexus 93360yc-fx2 Cisco nexus 9336c-fx2 Cisco nexus 9336c-fx2-e Cisco nexus 9336pq Cisco nexus 9336pq Aci Cisco nexus 9336pq Aci Spine Cisco nexus 9336pq Aci Spine Switch Cisco nexus 93400ld-h1 Cisco nexus 9348d-gx2a Cisco nexus 9348gc-fx3 Cisco nexus 9348gc-fx3ph Cisco nexus 9348gc-fxp Cisco nexus 93600cd-gx Cisco nexus 9364c Cisco nexus 9364c-gx Cisco nexus 9364c-h1 Cisco nexus 9364d-gx2a Cisco nexus 9372px Cisco nexus 9372px-e Cisco nexus 9372px-e Switch Cisco nexus 9372px Switch Cisco nexus 9372tx Cisco nexus 9372tx-e Cisco nexus 9372tx-e Switch Cisco nexus 9372tx Switch Cisco nexus 9396px Cisco nexus 9396px Switch Cisco nexus 9396tx Cisco nexus 9396tx Switch Cisco nexus 9408 Cisco nexus 9432pq Cisco nexus 9500 Cisco nexus 9500 16-slot Cisco nexus 9500 4-slot Cisco nexus 9500 8-slot Cisco nexus 9500 Supervisor A Cisco nexus 9500 Supervisor A\+ Cisco nexus 9500 Supervisor B Cisco nexus 9500 Supervisor B\+ Cisco nexus 9500r Cisco nexus 9504 Cisco nexus 9504 Switch Cisco nexus 9508 Cisco nexus 9508 Switch Cisco nexus 9516 Cisco nexus 9516 Switch Cisco nexus 9536pq Cisco nexus 9636pq Cisco nexus 9716d-gx Cisco nexus 9736pq Cisco nexus 9800 Cisco nexus 9800 34-port 100g And 14-port 400g Line Card Cisco nexus 9800 36-port 400g Line Card Cisco nexus 9804 Cisco nexus 9808 Cisco nx-os
Weaknesses		NVD-CWE-Other
CPEs		cpe:2.3:h:cisco:n9k-c92160yc-x:-:::::::* cpe:2.3:h:cisco:n9k-c92300yc:-:::::::* cpe:2.3:h:cisco:n9k-c92304qc:-:::::::* cpe:2.3:h:cisco:n9k-c9232c:-:::::::* cpe:2.3:h:cisco:n9k-c92348gc-x:-:::::::* cpe:2.3:h:cisco:n9k-c9236c:-:::::::* cpe:2.3:h:cisco:n9k-c9272q:-:::::::* cpe:2.3:h:cisco:n9k-c93108tc-ex:-:::::::* cpe:2.3:h:cisco:n9k-c93108tc-fx:-:::::::* cpe:2.3:h:cisco:n9k-c93120tx:-:::::::* cpe:2.3:h:cisco:n9k-c93128tx:-:::::::* cpe:2.3:h:cisco:n9k-c9316d-gx:-:::::::* cpe:2.3:h:cisco:n9k-c93180lc-ex:-:::::::* cpe:2.3:h:cisco:n9k-c93180yc-ex:-:::::::* cpe:2.3:h:cisco:n9k-c93180yc-fx:-:::::::* cpe:2.3:h:cisco:n9k-c93180yc2-fx:-:::::::* cpe:2.3:h:cisco:n9k-c93216tc-fx2:-:::::::* cpe:2.3:h:cisco:n9k-c93240yc-fx2:-:::::::* cpe:2.3:h:cisco:n9k-c9332c:-:::::::* cpe:2.3:h:cisco:n9k-c9332d-gx2b:-:::::::* cpe:2.3:h:cisco:n9k-c9332pq:-:::::::* cpe:2.3:h:cisco:n9k-c93360yc-fx2:-:::::::* cpe:2.3:h:cisco:n9k-c9336c-fx2:-:::::::* cpe:2.3:h:cisco:n9k-c9348d-gx2a:-:::::::* cpe:2.3:h:cisco:n9k-c9348gc-fxp:-:::::::* cpe:2.3:h:cisco:n9k-c93600cd-gx:-:::::::* cpe:2.3:h:cisco:n9k-c9364c-gx:-:::::::* cpe:2.3:h:cisco:n9k-c9364c:-:::::::* cpe:2.3:h:cisco:n9k-c9364d-gx2a:-:::::::* cpe:2.3:h:cisco:n9k-c9372px-e:-:::::::* cpe:2.3:h:cisco:n9k-c9372px:-:::::::* cpe:2.3:h:cisco:n9k-c9372tx-e:-:::::::* cpe:2.3:h:cisco:n9k-c9372tx:-:::::::* cpe:2.3:h:cisco:n9k-c9396px:-:::::::* cpe:2.3:h:cisco:n9k-c9396tx:-:::::::* cpe:2.3:h:cisco:n9k-c9504-fm-r:-:::::::* cpe:2.3:h:cisco:n9k-c9504:-:::::::* cpe:2.3:h:cisco:n9k-c9508-fm-r:-:::::::* cpe:2.3:h:cisco:n9k-c9508:-:::::::* cpe:2.3:h:cisco:n9k-c9516:-:::::::* cpe:2.3:h:cisco:n9k-sc-a:-:::::::* cpe:2.3:h:cisco:n9k-sup-a:-:::::::* cpe:2.3:h:cisco:n9k-sup-a\+:-:::::::* cpe:2.3:h:cisco:n9k-sup-b:-:::::::* cpe:2.3:h:cisco:n9k-sup-b\+:-:::::::* cpe:2.3:h:cisco:n9k-x9400-16w:-:::::::* cpe:2.3:h:cisco:n9k-x9400-22l:-:::::::* cpe:2.3:h:cisco:n9k-x9400-8d:-:::::::* cpe:2.3:h:cisco:n9k-x9432c-s:-:::::::* cpe:2.3:h:cisco:n9k-x9464px:-:::::::* cpe:2.3:h:cisco:n9k-x9464tx2:-:::::::* cpe:2.3:h:cisco:n9k-x9564px:-:::::::* cpe:2.3:h:cisco:n9k-x9564tx:-:::::::* cpe:2.3:h:cisco:n9k-x96136yc-r:-:::::::* cpe:2.3:h:cisco:n9k-x9636c-r:-:::::::* cpe:2.3:h:cisco:n9k-x9636c-rx:-:::::::* cpe:2.3:h:cisco:n9k-x9636q-r:-:::::::* cpe:2.3:h:cisco:n9k-x97160yc-ex:-:::::::* cpe:2.3:h:cisco:n9k-x97284yc-fx:-:::::::* cpe:2.3:h:cisco:n9k-x9732c-ex:-:::::::* cpe:2.3:h:cisco:n9k-x9732c-fx:-:::::::* cpe:2.3:h:cisco:n9k-x9736c-ex:-:::::::* cpe:2.3:h:cisco:n9k-x9736c-fx:-:::::::* cpe:2.3:h:cisco:n9k-x9788tc-fx:-:::::::* cpe:2.3:h:cisco:nexus_3000:-:::::::* cpe:2.3:h:cisco:nexus_3000_series:-:::::::* cpe:2.3:h:cisco:nexus_3016:-:::::::* cpe:2.3:h:cisco:nexus_3016q:-:::::::* cpe:2.3:h:cisco:nexus_3048:-:::::::* cpe:2.3:h:cisco:nexus_3064-32t:-:::::::* cpe:2.3:h:cisco:nexus_3064-t:-:::::::* cpe:2.3:h:cisco:nexus_3064-x:-:::::::* cpe:2.3:h:cisco:nexus_3064:-:::::::* cpe:2.3:h:cisco:nexus_3064t:-:::::::* cpe:2.3:h:cisco:nexus_3064x:-:::::::* cpe:2.3:h:cisco:nexus_3100-v:-:::::::* cpe:2.3:h:cisco:nexus_3100-z:-:::::::* cpe:2.3:h:cisco:nexus_3100:-:::::::* cpe:2.3:h:cisco:nexus_3100v:-:::::::* cpe:2.3:h:cisco:nexus_31108pc-v:-:::::::* cpe:2.3:h:cisco:nexus_31108pv-v:-:::::::* cpe:2.3:h:cisco:nexus_31108tc-v:-:::::::* cpe:2.3:h:cisco:nexus_31128pq:-:::::::* cpe:2.3:h:cisco:nexus_3132c-z:-:::::::* cpe:2.3:h:cisco:nexus_3132q-v:-:::::::* cpe:2.3:h:cisco:nexus_3132q-x:-:::::::* cpe:2.3:h:cisco:nexus_3132q-x\/3132q-xl:-:::::::* cpe:2.3:h:cisco:nexus_3132q-xl:-:::::::* cpe:2.3:h:cisco:nexus_3132q:-:::::::* cpe:2.3:h:cisco:nexus_3164q:-:::::::* cpe:2.3:h:cisco:nexus_3172:-:::::::* cpe:2.3:h:cisco:nexus_3172pq-xl:-:::::::* cpe:2.3:h:cisco:nexus_3172pq:-:::::::* cpe:2.3:h:cisco:nexus_3172pq\/pq-xl:-:::::::* cpe:2.3:h:cisco:nexus_3172tq-32t:-:::::::* cpe:2.3:h:cisco:nexus_3172tq-xl:-:::::::* cpe:2.3:h:cisco:nexus_3172tq:-:::::::* cpe:2.3:h:cisco:nexus_3200:-:::::::* cpe:2.3:h:cisco:nexus_3232:-:::::::* cpe:2.3:h:cisco:nexus_3232c:-:::::::* cpe:2.3:h:cisco:nexus_3232c_:-:::::::* cpe:2.3:h:cisco:nexus_3264c-e:-:::::::* cpe:2.3:h:cisco:nexus_3264q:-:::::::* cpe:2.3:h:cisco:nexus_3400:-:::::::* cpe:2.3:h:cisco:nexus_3408-s:-:::::::* cpe:2.3:h:cisco:nexus_34180yc:-:::::::* cpe:2.3:h:cisco:nexus_34200yc-sm:-:::::::* cpe:2.3:h:cisco:nexus_3432d-s:-:::::::* cpe:2.3:h:cisco:nexus_3464c:-:::::::* cpe:2.3:h:cisco:nexus_3500:-:::::::* cpe:2.3:h:cisco:nexus_3500_platform:-:::::::* cpe:2.3:h:cisco:nexus_3524-x:-:::::::* cpe:2.3:h:cisco:nexus_3524-x\/xl:-:::::::* cpe:2.3:h:cisco:nexus_3524-xl:-:::::::* cpe:2.3:h:cisco:nexus_3524:-:::::::* cpe:2.3:h:cisco:nexus_3548-x:-:::::::* cpe:2.3:h:cisco:nexus_3548-x\/xl:-:::::::* cpe:2.3:h:cisco:nexus_3548-xl:-:::::::* cpe:2.3:h:cisco:nexus_3548:-:::::::* cpe:2.3:h:cisco:nexus_3600:-:::::::* cpe:2.3:h:cisco:nexus_36180yc-r:-:::::::* cpe:2.3:h:cisco:nexus_3636c-r:-:::::::* cpe:2.3:h:cisco:nexus_9000:-:::::::* cpe:2.3:h:cisco:nexus_9000_in_aci_mode:-:::::::* cpe:2.3:h:cisco:nexus_9000_in_standalone:-:::::::* cpe:2.3:h:cisco:nexus_9000_in_standalone_nx-os_mode:-:::::::* cpe:2.3:h:cisco:nexus_9000v:-:::::::* cpe:2.3:h:cisco:nexus_9200:-:::::::* cpe:2.3:h:cisco:nexus_9200yc:-:::::::* cpe:2.3:h:cisco:nexus_92160yc-x:-:::::::* cpe:2.3:h:cisco:nexus_92160yc_switch:-:::::::* cpe:2.3:h:cisco:nexus_9221c:-:::::::* cpe:2.3:h:cisco:nexus_92300yc:-:::::::* cpe:2.3:h:cisco:nexus_92300yc_switch:-:::::::* cpe:2.3:h:cisco:nexus_92304qc:-:::::::* cpe:2.3:h:cisco:nexus_92304qc_switch:-:::::::* cpe:2.3:h:cisco:nexus_9232e:-:::::::* cpe:2.3:h:cisco:nexus_92348gc-x:-:::::::* cpe:2.3:h:cisco:nexus_9236c:-:::::::* cpe:2.3:h:cisco:nexus_9236c_switch:-:::::::* cpe:2.3:h:cisco:nexus_9272q:-:::::::* cpe:2.3:h:cisco:nexus_9272q_switch:-:::::::* cpe:2.3:h:cisco:nexus_9300:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-ex:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-ex_switch:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-fx3:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-fx3h:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-fx3p:-:::::::* cpe:2.3:h:cisco:nexus_93108tc-fx:-:::::::* cpe:2.3:h:cisco:nexus_93120tx:-:::::::* cpe:2.3:h:cisco:nexus_93120tx_switch:-:::::::* cpe:2.3:h:cisco:nexus_93128:-:::::::* cpe:2.3:h:cisco:nexus_93128tx:-:::::::* cpe:2.3:h:cisco:nexus_93128tx_switch:-:::::::* cpe:2.3:h:cisco:nexus_9316d-gx:-:::::::* cpe:2.3:h:cisco:nexus_93180lc-ex:-:::::::* cpe:2.3:h:cisco:nexus_93180lc-ex_switch:-:::::::* cpe:2.3:h:cisco:nexus_93180tc-ex:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-ex:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-ex_switch:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-fx3:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-fx3h:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:::::::* cpe:2.3:h:cisco:nexus_93180yc-fx:-:::::::* cpe:2.3:h:cisco:nexus_93216tc-fx2:-:::::::* cpe:2.3:h:cisco:nexus_93240tc-fx2:-:::::::* cpe:2.3:h:cisco:nexus_93240yc-fx2:-:::::::* cpe:2.3:h:cisco:nexus_9332c:-:::::::* cpe:2.3:h:cisco:nexus_9332d-gx2b:-:::::::* cpe:2.3:h:cisco:nexus_9332d-h2r:-:::::::* cpe:2.3:h:cisco:nexus_9332pq:-:::::::* cpe:2.3:h:cisco:nexus_9332pq_switch:-:::::::* cpe:2.3:h:cisco:nexus_93360yc-fx2:-:::::::* cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:::::::* cpe:2.3:h:cisco:nexus_9336c-fx2:-:::::::* cpe:2.3:h:cisco:nexus_9336pq:-:::::::* cpe:2.3:h:cisco:nexus_9336pq_aci:-:::::::* cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:::::::* cpe:2.3:h:cisco:nexus_9336pq_aci_spine_switch:-:::::::* cpe:2.3:h:cisco:nexus_93400ld-h1:-:::::::* cpe:2.3:h:cisco:nexus_9348d-gx2a:-:::::::* cpe:2.3:h:cisco:nexus_9348gc-fx3:-:::::::* cpe:2.3:h:cisco:nexus_9348gc-fx3ph:-:::::::* cpe:2.3:h:cisco:nexus_9348gc-fxp:-:::::::* cpe:2.3:h:cisco:nexus_93600cd-gx:-:::::::* cpe:2.3:h:cisco:nexus_9364c-gx:-:::::::* cpe:2.3:h:cisco:nexus_9364c-h1:-:::::::* cpe:2.3:h:cisco:nexus_9364c:-:::::::* cpe:2.3:h:cisco:nexus_9364d-gx2a:-:::::::* cpe:2.3:h:cisco:nexus_9372px-e:-:::::::* cpe:2.3:h:cisco:nexus_9372px-e_switch:-:::::::* cpe:2.3:h:cisco:nexus_9372px:-:::::::* cpe:2.3:h:cisco:nexus_9372px_switch:-:::::::* cpe:2.3:h:cisco:nexus_9372tx-e:-:::::::* cpe:2.3:h:cisco:nexus_9372tx-e_switch:-:::::::* cpe:2.3:h:cisco:nexus_9372tx:-:::::::* cpe:2.3:h:cisco:nexus_9372tx_switch:-:::::::* cpe:2.3:h:cisco:nexus_9396px:-:::::::* cpe:2.3:h:cisco:nexus_9396px_switch:-:::::::* cpe:2.3:h:cisco:nexus_9396tx:-:::::::* cpe:2.3:h:cisco:nexus_9396tx_switch:-:::::::* cpe:2.3:h:cisco:nexus_9408:-:::::::* cpe:2.3:h:cisco:nexus_9432pq:-:::::::* cpe:2.3:h:cisco:nexus_9500:-:::::::* cpe:2.3:h:cisco:nexus_9500_16-slot:-:::::::* cpe:2.3:h:cisco:nexus_9500_4-slot:-:::::::* cpe:2.3:h:cisco:nexus_9500_8-slot:-:::::::* cpe:2.3:h:cisco:nexus_9500_supervisor_a:-:::::::* cpe:2.3:h:cisco:nexus_9500_supervisor_a\+:-:::::::* cpe:2.3:h:cisco:nexus_9500_supervisor_b:-:::::::* cpe:2.3:h:cisco:nexus_9500_supervisor_b\+:-:::::::* cpe:2.3:h:cisco:nexus_9500r:-:::::::* cpe:2.3:h:cisco:nexus_9504:-:::::::* cpe:2.3:h:cisco:nexus_9504_switch:-:::::::* cpe:2.3:h:cisco:nexus_9508:-:::::::* cpe:2.3:h:cisco:nexus_9508_switch:-:::::::* cpe:2.3:h:cisco:nexus_9516:-:::::::* cpe:2.3:h:cisco:nexus_9516_switch:-:::::::* cpe:2.3:h:cisco:nexus_9536pq:-:::::::* cpe:2.3:h:cisco:nexus_9636pq:-:::::::* cpe:2.3:h:cisco:nexus_9716d-gx:-:::::::* cpe:2.3:h:cisco:nexus_9736pq:-:::::::* cpe:2.3:h:cisco:nexus_9800:-:::::::* cpe:2.3:h:cisco:nexus_9800_34-port_100g_and_14-port_400g_line_card:-:::::::* cpe:2.3:h:cisco:nexus_9800_36-port_400g_line_card:-:::::::* cpe:2.3:h:cisco:nexus_9804:-:::::::* cpe:2.3:h:cisco:nexus_9808:-:::::::* cpe:2.3:o:cisco:nx-os:9.3\(13\):::::::*
Vendors & Products		Cisco Cisco n9k-c92160yc-x Cisco n9k-c92300yc Cisco n9k-c92304qc Cisco n9k-c9232c Cisco n9k-c92348gc-x Cisco n9k-c9236c Cisco n9k-c9272q Cisco n9k-c93108tc-ex Cisco n9k-c93108tc-fx Cisco n9k-c93120tx Cisco n9k-c93128tx Cisco n9k-c9316d-gx Cisco n9k-c93180lc-ex Cisco n9k-c93180yc-ex Cisco n9k-c93180yc-fx Cisco n9k-c93180yc2-fx Cisco n9k-c93216tc-fx2 Cisco n9k-c93240yc-fx2 Cisco n9k-c9332c Cisco n9k-c9332d-gx2b Cisco n9k-c9332pq Cisco n9k-c93360yc-fx2 Cisco n9k-c9336c-fx2 Cisco n9k-c9348d-gx2a Cisco n9k-c9348gc-fxp Cisco n9k-c93600cd-gx Cisco n9k-c9364c Cisco n9k-c9364c-gx Cisco n9k-c9364d-gx2a Cisco n9k-c9372px Cisco n9k-c9372px-e Cisco n9k-c9372tx Cisco n9k-c9372tx-e Cisco n9k-c9396px Cisco n9k-c9396tx Cisco n9k-c9504 Cisco n9k-c9504-fm-r Cisco n9k-c9508 Cisco n9k-c9508-fm-r Cisco n9k-c9516 Cisco n9k-sc-a Cisco n9k-sup-a Cisco n9k-sup-a\+ Cisco n9k-sup-b Cisco n9k-sup-b\+ Cisco n9k-x9400-16w Cisco n9k-x9400-22l Cisco n9k-x9400-8d Cisco n9k-x9432c-s Cisco n9k-x9464px Cisco n9k-x9464tx2 Cisco n9k-x9564px Cisco n9k-x9564tx Cisco n9k-x96136yc-r Cisco n9k-x9636c-r Cisco n9k-x9636c-rx Cisco n9k-x9636q-r Cisco n9k-x97160yc-ex Cisco n9k-x97284yc-fx Cisco n9k-x9732c-ex Cisco n9k-x9732c-fx Cisco n9k-x9736c-ex Cisco n9k-x9736c-fx Cisco n9k-x9788tc-fx Cisco nexus 3000 Cisco nexus 3000 Series Cisco nexus 3016 Cisco nexus 3016q Cisco nexus 3048 Cisco nexus 3064 Cisco nexus 3064-32t Cisco nexus 3064-t Cisco nexus 3064-x Cisco nexus 3064t Cisco nexus 3064x Cisco nexus 3100 Cisco nexus 3100-v Cisco nexus 3100-z Cisco nexus 3100v Cisco nexus 31108pc-v Cisco nexus 31108pv-v Cisco nexus 31108tc-v Cisco nexus 31128pq Cisco nexus 3132c-z Cisco nexus 3132q Cisco nexus 3132q-v Cisco nexus 3132q-x Cisco nexus 3132q-x\/3132q-xl Cisco nexus 3132q-xl Cisco nexus 3164q Cisco nexus 3172 Cisco nexus 3172pq Cisco nexus 3172pq-xl Cisco nexus 3172pq\/pq-xl Cisco nexus 3172tq Cisco nexus 3172tq-32t Cisco nexus 3172tq-xl Cisco nexus 3200 Cisco nexus 3232 Cisco nexus 3232c Cisco nexus 3232c Cisco nexus 3264c-e Cisco nexus 3264q Cisco nexus 3400 Cisco nexus 3408-s Cisco nexus 34180yc Cisco nexus 34200yc-sm Cisco nexus 3432d-s Cisco nexus 3464c Cisco nexus 3500 Cisco nexus 3500 Platform Cisco nexus 3524 Cisco nexus 3524-x Cisco nexus 3524-x\/xl Cisco nexus 3524-xl Cisco nexus 3548 Cisco nexus 3548-x Cisco nexus 3548-x\/xl Cisco nexus 3548-xl Cisco nexus 3600 Cisco nexus 36180yc-r Cisco nexus 3636c-r Cisco nexus 9000 Cisco nexus 9000 In Aci Mode Cisco nexus 9000 In Standalone Cisco nexus 9000 In Standalone Nx-os Mode Cisco nexus 9000v Cisco nexus 9200 Cisco nexus 9200yc Cisco nexus 92160yc-x Cisco nexus 92160yc Switch Cisco nexus 9221c Cisco nexus 92300yc Cisco nexus 92300yc Switch Cisco nexus 92304qc Cisco nexus 92304qc Switch Cisco nexus 9232e Cisco nexus 92348gc-x Cisco nexus 9236c Cisco nexus 9236c Switch Cisco nexus 9272q Cisco nexus 9272q Switch Cisco nexus 9300 Cisco nexus 93108tc-ex Cisco nexus 93108tc-ex-24 Cisco nexus 93108tc-ex Switch Cisco nexus 93108tc-fx Cisco nexus 93108tc-fx-24 Cisco nexus 93108tc-fx3 Cisco nexus 93108tc-fx3h Cisco nexus 93108tc-fx3p Cisco nexus 93120tx Cisco nexus 93120tx Switch Cisco nexus 93128 Cisco nexus 93128tx Cisco nexus 93128tx Switch Cisco nexus 9316d-gx Cisco nexus 93180lc-ex Cisco nexus 93180lc-ex Switch Cisco nexus 93180tc-ex Cisco nexus 93180yc-ex Cisco nexus 93180yc-ex-24 Cisco nexus 93180yc-ex Switch Cisco nexus 93180yc-fx Cisco nexus 93180yc-fx-24 Cisco nexus 93180yc-fx3 Cisco nexus 93180yc-fx3h Cisco nexus 93180yc-fx3s Cisco nexus 93216tc-fx2 Cisco nexus 93240tc-fx2 Cisco nexus 93240yc-fx2 Cisco nexus 9332c Cisco nexus 9332d-gx2b Cisco nexus 9332d-h2r Cisco nexus 9332pq Cisco nexus 9332pq Switch Cisco nexus 93360yc-fx2 Cisco nexus 9336c-fx2 Cisco nexus 9336c-fx2-e Cisco nexus 9336pq Cisco nexus 9336pq Aci Cisco nexus 9336pq Aci Spine Cisco nexus 9336pq Aci Spine Switch Cisco nexus 93400ld-h1 Cisco nexus 9348d-gx2a Cisco nexus 9348gc-fx3 Cisco nexus 9348gc-fx3ph Cisco nexus 9348gc-fxp Cisco nexus 93600cd-gx Cisco nexus 9364c Cisco nexus 9364c-gx Cisco nexus 9364c-h1 Cisco nexus 9364d-gx2a Cisco nexus 9372px Cisco nexus 9372px-e Cisco nexus 9372px-e Switch Cisco nexus 9372px Switch Cisco nexus 9372tx Cisco nexus 9372tx-e Cisco nexus 9372tx-e Switch Cisco nexus 9372tx Switch Cisco nexus 9396px Cisco nexus 9396px Switch Cisco nexus 9396tx Cisco nexus 9396tx Switch Cisco nexus 9408 Cisco nexus 9432pq Cisco nexus 9500 Cisco nexus 9500 16-slot Cisco nexus 9500 4-slot Cisco nexus 9500 8-slot Cisco nexus 9500 Supervisor A Cisco nexus 9500 Supervisor A\+ Cisco nexus 9500 Supervisor B Cisco nexus 9500 Supervisor B\+ Cisco nexus 9500r Cisco nexus 9504 Cisco nexus 9504 Switch Cisco nexus 9508 Cisco nexus 9508 Switch Cisco nexus 9516 Cisco nexus 9516 Switch Cisco nexus 9536pq Cisco nexus 9636pq Cisco nexus 9716d-gx Cisco nexus 9736pq Cisco nexus 9800 Cisco nexus 9800 34-port 100g And 14-port 400g Line Card Cisco nexus 9800 36-port 400g Line Card Cisco nexus 9804 Cisco nexus 9808 Cisco nx-os

Wed, 28 Aug 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 28 Aug 2024 16:45:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.
Title		Cisco NX-OS Software Python Parser Escape Vulnerability
Weaknesses		CWE-693
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-psbe-ce-YvbTn5du https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/105x/programmability/cisco-nexus-9000-series-nx-os-programmability-guide-105x/m-n9k-python-api-101x.html?bookSearch=true#concept_A2CFF094ADCB414C983EA06AD8E9A410
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}`

Subscriptions

Cisco N9k-c92160yc-x N9k-c92300yc N9k-c92304qc N9k-c9232c N9k-c92348gc-x N9k-c9236c N9k-c9272q N9k-c93108tc-ex N9k-c93108tc-fx N9k-c93120tx N9k-c93128tx N9k-c9316d-gx N9k-c93180lc-ex N9k-c93180yc-ex N9k-c93180yc-fx N9k-c93180yc2-fx N9k-c93216tc-fx2 N9k-c93240yc-fx2 N9k-c9332c N9k-c9332d-gx2b N9k-c9332pq N9k-c93360yc-fx2 N9k-c9336c-fx2 N9k-c9348d-gx2a N9k-c9348gc-fxp N9k-c93600cd-gx N9k-c9364c N9k-c9364c-gx N9k-c9364d-gx2a N9k-c9372px N9k-c9372px-e N9k-c9372tx N9k-c9372tx-e N9k-c9396px N9k-c9396tx N9k-c9504 N9k-c9504-fm-r N9k-c9508 N9k-c9508-fm-r N9k-c9516 N9k-sc-a N9k-sup-a N9k-sup-a\+ N9k-sup-b N9k-sup-b\+ N9k-x9400-16w N9k-x9400-22l N9k-x9400-8d N9k-x9432c-s N9k-x9464px N9k-x9464tx2 N9k-x9564px N9k-x9564tx N9k-x96136yc-r N9k-x9636c-r N9k-x9636c-rx N9k-x9636q-r N9k-x97160yc-ex N9k-x97284yc-fx N9k-x9732c-ex N9k-x9732c-fx N9k-x9736c-ex N9k-x9736c-fx N9k-x9788tc-fx Nexus 3000 Nexus 3000 Series Nexus 3016 Nexus 3016q Nexus 3048 Nexus 3064 Nexus 3064-32t Nexus 3064-t Nexus 3064-x Nexus 3064t Nexus 3064x Nexus 3100 Nexus 3100-v Nexus 3100-z Nexus 3100v Nexus 31108pc-v Nexus 31108pv-v Nexus 31108tc-v Nexus 31128pq Nexus 3132c-z Nexus 3132q Nexus 3132q-v Nexus 3132q-x Nexus 3132q-x\/3132q-xl Nexus 3132q-xl Nexus 3164q Nexus 3172 Nexus 3172pq Nexus 3172pq-xl Nexus 3172pq\/pq-xl Nexus 3172tq Nexus 3172tq-32t Nexus 3172tq-xl Nexus 3200 Nexus 3232 Nexus 3232c Nexus 3232c Nexus 3264c-e Nexus 3264q Nexus 3400 Nexus 3408-s Nexus 34180yc Nexus 34200yc-sm Nexus 3432d-s Nexus 3464c Nexus 3500 Nexus 3500 Platform Nexus 3524 Nexus 3524-x Nexus 3524-x\/xl Nexus 3524-xl Nexus 3548 Nexus 3548-x Nexus 3548-x\/xl Nexus 3548-xl Nexus 3600 Nexus 36180yc-r Nexus 3636c-r Nexus 9000 Nexus 9000 In Aci Mode Nexus 9000 In Standalone Nexus 9000 In Standalone Nx-os Mode Nexus 9000v Nexus 9200 Nexus 9200yc Nexus 92160yc-x Nexus 92160yc Switch Nexus 9221c Nexus 92300yc Nexus 92300yc Switch Nexus 92304qc Nexus 92304qc Switch Nexus 9232e Nexus 92348gc-x Nexus 9236c Nexus 9236c Switch Nexus 9272q Nexus 9272q Switch Nexus 9300 Nexus 93108tc-ex Nexus 93108tc-ex-24 Nexus 93108tc-ex Switch Nexus 93108tc-fx Nexus 93108tc-fx-24 Nexus 93108tc-fx3 Nexus 93108tc-fx3h Nexus 93108tc-fx3p Nexus 93120tx Nexus 93120tx Switch Nexus 93128 Nexus 93128tx Nexus 93128tx Switch Nexus 9316d-gx Nexus 93180lc-ex Nexus 93180lc-ex Switch Nexus 93180tc-ex Nexus 93180yc-ex Nexus 93180yc-ex-24 Nexus 93180yc-ex Switch Nexus 93180yc-fx Nexus 93180yc-fx-24 Nexus 93180yc-fx3 Nexus 93180yc-fx3h Nexus 93180yc-fx3s Nexus 93216tc-fx2 Nexus 93240tc-fx2 Nexus 93240yc-fx2 Nexus 9332c Nexus 9332d-gx2b Nexus 9332d-h2r Nexus 9332pq Nexus 9332pq Switch Nexus 93360yc-fx2 Nexus 9336c-fx2 Nexus 9336c-fx2-e Nexus 9336pq Nexus 9336pq Aci Nexus 9336pq Aci Spine Nexus 9336pq Aci Spine Switch Nexus 93400ld-h1 Nexus 9348d-gx2a Nexus 9348gc-fx3 Nexus 9348gc-fx3ph Nexus 9348gc-fxp Nexus 93600cd-gx Nexus 9364c Nexus 9364c-gx Nexus 9364c-h1 Nexus 9364d-gx2a Nexus 9372px Nexus 9372px-e Nexus 9372px-e Switch Nexus 9372px Switch Nexus 9372tx Nexus 9372tx-e Nexus 9372tx-e Switch Nexus 9372tx Switch Nexus 9396px Nexus 9396px Switch Nexus 9396tx Nexus 9396tx Switch Nexus 9408 Nexus 9432pq Nexus 9500 Nexus 9500 16-slot Nexus 9500 4-slot Nexus 9500 8-slot Nexus 9500 Supervisor A Nexus 9500 Supervisor A\+ Nexus 9500 Supervisor B Nexus 9500 Supervisor B\+ Nexus 9500r Nexus 9504 Nexus 9504 Switch Nexus 9508 Nexus 9508 Switch Nexus 9516 Nexus 9516 Switch Nexus 9536pq Nexus 9636pq Nexus 9716d-gx Nexus 9736pq Nexus 9800 Nexus 9800 34-port 100g And 14-port 400g Line Card Nexus 9800 36-port 400g Line Card Nexus 9804 Nexus 9808 Nx-os

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2024-08-28T16:37:17.319Z

Updated: 2024-08-28T17:23:56.426Z

Reserved: 2023-11-08T15:08:07.626Z

Link: CVE-2024-20286

Vulnrichment

Updated: 2024-08-28T17:23:52.707Z

NVD

Status : Analyzed

Published: 2024-08-28T17:15:08.400

Modified: 2024-10-22T14:44:16.063

Link: CVE-2024-20286

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object