CVE-2024-20286

Summary

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device.

The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco NX-OS Software8.2(5)affected
CiscoCisco NX-OS Software7.3(5)D1(1)affected
CiscoCisco NX-OS Software8.4(2)affected
CiscoCisco NX-OS Software6.2(2)affected
CiscoCisco NX-OS Software8.4(3)affected
CiscoCisco NX-OS Software9.2(3)affected
CiscoCisco NX-OS Software7.0(3)I5(2)affected
CiscoCisco NX-OS Software8.2(1)affected
CiscoCisco NX-OS Software6.0(2)A8(7a)affected
CiscoCisco NX-OS Software7.0(3)I4(5)affected
CiscoCisco NX-OS Software6.0(2)A6(1)affected
CiscoCisco NX-OS Software7.3(1)D1(1)affected
CiscoCisco NX-OS Software6.2(14a)affected
CiscoCisco NX-OS Software7.0(3)I4(6)affected
CiscoCisco NX-OS Software7.0(3)I4(3)affected
CiscoCisco NX-OS Software9.2(2v)affected
CiscoCisco NX-OS Software6.0(2)A6(5b)affected
CiscoCisco NX-OS Software7.3(0)D1(1)affected
CiscoCisco NX-OS Software6.2(17a)affected
CiscoCisco NX-OS Software7.0(3)I4(7)affected
CiscoCisco NX-OS Software6.0(2)U6(1a)affected
CiscoCisco NX-OS Software7.0(3)I4(1)affected
CiscoCisco NX-OS Software7.0(3)I4(8)affected
CiscoCisco NX-OS Software7.0(3)I4(2)affected
CiscoCisco NX-OS Software7.0(3)IM3(1)affected
CiscoCisco NX-OS Software6.0(2)U6(5a)affected
CiscoCisco NX-OS Software6.0(2)A8(11)affected
CiscoCisco NX-OS Software6.0(2)A6(4a)affected
CiscoCisco NX-OS Software6.2(9)affected
CiscoCisco NX-OS Software6.2(5)affected
CiscoCisco NX-OS Software7.3(4)D1(1)affected
CiscoCisco NX-OS Software6.2(20)affected
CiscoCisco NX-OS Software9.2(1)affected
CiscoCisco NX-OS Software9.2(2t)affected
CiscoCisco NX-OS Software9.2(3y)affected
CiscoCisco NX-OS Software7.0(3)I4(1t)affected
CiscoCisco NX-OS Software6.0(2)U6(5c)affected
CiscoCisco NX-OS Software6.0(2)A6(4)affected
CiscoCisco NX-OS Software7.0(3)I7(6z)affected
CiscoCisco NX-OS Software9.3(2)affected
CiscoCisco NX-OS Software7.3(1)DY(1)affected
CiscoCisco NX-OS Software7.0(3)F3(3)affected
CiscoCisco NX-OS Software6.0(2)U6(6)affected
CiscoCisco NX-OS Software6.2(29)affected
CiscoCisco NX-OS Software7.0(3)I7(3z)affected
CiscoCisco NX-OS Software7.0(3)IM7(2)affected
CiscoCisco NX-OS Software6.0(2)A8(11b)affected
CiscoCisco NX-OS Software6.2(9a)affected
CiscoCisco NX-OS Software7.0(3)I7(5a)affected
CiscoCisco NX-OS Software6.2(11d)affected
CiscoCisco NX-OS Software8.1(1)affected
CiscoCisco NX-OS Software7.0(3)I6(1)affected
CiscoCisco NX-OS Software6.0(2)U6(10)affected
CiscoCisco NX-OS Software7.2(2)D1(2)affected
CiscoCisco NX-OS Software7.0(3)IM3(2)affected
CiscoCisco NX-OS Software6.0(2)A6(8)affected
CiscoCisco NX-OS Software8.2(2)affected
CiscoCisco NX-OS Software6.0(2)U6(1)affected
CiscoCisco NX-OS Software7.0(3)I5(3b)affected
CiscoCisco NX-OS Software8.3(2)affected
CiscoCisco NX-OS Software6.0(2)A6(2a)affected
CiscoCisco NX-OS Software6.2(27)affected
CiscoCisco NX-OS Software7.3(2)D1(3a)affected
CiscoCisco NX-OS Software6.0(2)U6(7)affected
CiscoCisco NX-OS Software9.2(4)affected
CiscoCisco NX-OS Software7.0(3)IM3(2a)affected
CiscoCisco NX-OS Software6.2(8b)affected
CiscoCisco NX-OS Software6.0(2)A8(10)affected
CiscoCisco NX-OS Software6.2(13)affected
CiscoCisco NX-OS Software6.0(2)A8(2)affected
CiscoCisco NX-OS Software7.0(3)IC4(4)affected
CiscoCisco NX-OS Software6.2(1)affected
CiscoCisco NX-OS Software8.1(2)affected
CiscoCisco NX-OS Software6.0(2)A6(3)affected
CiscoCisco NX-OS Software6.0(2)U6(5b)affected
CiscoCisco NX-OS Software7.0(3)F3(3c)affected
CiscoCisco NX-OS Software7.3(3)D1(1)affected
CiscoCisco NX-OS Software7.0(3)F3(1)affected
CiscoCisco NX-OS Software6.0(2)U6(5)affected
CiscoCisco NX-OS Software7.0(3)F3(5)affected
CiscoCisco NX-OS Software8.2(3)affected
CiscoCisco NX-OS Software6.0(2)A6(7)affected
CiscoCisco NX-OS Software7.0(3)I7(2)affected
CiscoCisco NX-OS Software6.2(5a)affected
CiscoCisco NX-OS Software6.2(18)affected
CiscoCisco NX-OS Software6.0(2)A6(5)affected
CiscoCisco NX-OS Software7.0(3)IM3(2b)affected
CiscoCisco NX-OS Software6.0(2)U6(4a)affected
CiscoCisco NX-OS Software7.0(3)I5(3)affected
CiscoCisco NX-OS Software7.0(3)I7(3)affected
CiscoCisco NX-OS Software6.0(2)A8(6)affected
CiscoCisco NX-OS Software7.0(3)I6(2)affected
CiscoCisco NX-OS Software8.3(1)affected
CiscoCisco NX-OS Software6.2(3)affected
CiscoCisco NX-OS Software6.2(22)affected
CiscoCisco NX-OS Software8.4(1)affected
CiscoCisco NX-OS Software8.1(1b)affected
CiscoCisco NX-OS Software7.2(2)D1(4)affected
CiscoCisco NX-OS Software6.0(2)A8(5)affected
CiscoCisco NX-OS Software7.3(0)DX(1)affected
CiscoCisco NX-OS Software7.3(2)D1(1)affected
CiscoCisco NX-OS Software6.0(2)U6(8)affected
CiscoCisco NX-OS Software7.0(3)IM3(3)affected
CiscoCisco NX-OS Software9.3(1)affected
CiscoCisco NX-OS Software6.0(2)U6(2)affected
CiscoCisco NX-OS Software6.2(9b)affected
CiscoCisco NX-OS Software6.0(2)A8(7)affected
CiscoCisco NX-OS Software7.0(3)I7(6)affected
CiscoCisco NX-OS Software7.3(2)D1(2)affected
CiscoCisco NX-OS Software6.2(25)affected
CiscoCisco NX-OS Software6.0(2)U6(3a)affected
CiscoCisco NX-OS Software8.0(1)affected
CiscoCisco NX-OS Software6.0(2)A8(11a)affected
CiscoCisco NX-OS Software6.2(11e)affected
CiscoCisco NX-OS Software7.0(3)I4(8z)affected
CiscoCisco NX-OS Software6.2(11)affected
CiscoCisco NX-OS Software7.0(3)I4(9)affected
CiscoCisco NX-OS Software6.2(16)affected
CiscoCisco NX-OS Software6.2(19)affected
CiscoCisco NX-OS Software8.2(4)affected
CiscoCisco NX-OS Software6.2(2a)affected
CiscoCisco NX-OS Software7.2(2)D1(3)affected
CiscoCisco NX-OS Software7.0(3)I7(4)affected
CiscoCisco NX-OS Software7.0(3)I7(7)affected
CiscoCisco NX-OS Software6.2(5b)affected
CiscoCisco NX-OS Software7.3(0)DY(1)affected
CiscoCisco NX-OS Software6.0(2)A8(9)affected
CiscoCisco NX-OS Software6.0(2)A8(1)affected
CiscoCisco NX-OS Software7.2(1)D1(1)affected
CiscoCisco NX-OS Software6.2(15)affected
CiscoCisco NX-OS Software6.0(2)A6(6)affected
CiscoCisco NX-OS Software6.0(2)A8(10a)affected
CiscoCisco NX-OS Software7.0(3)I5(1)affected
CiscoCisco NX-OS Software9.3(1z)affected
CiscoCisco NX-OS Software9.2(2)affected
CiscoCisco NX-OS Software6.2(7)affected
CiscoCisco NX-OS Software6.2(9c)affected
CiscoCisco NX-OS Software7.0(3)F3(4)affected
CiscoCisco NX-OS Software6.2(6b)affected
CiscoCisco NX-OS Software7.0(3)I4(8b)affected
CiscoCisco NX-OS Software8.1(2a)affected
CiscoCisco NX-OS Software7.3(2)D1(3)affected
CiscoCisco NX-OS Software6.2(8)affected
CiscoCisco NX-OS Software6.0(2)A8(3)affected
CiscoCisco NX-OS Software6.2(11b)affected
CiscoCisco NX-OS Software7.0(3)I4(6t)affected
CiscoCisco NX-OS Software7.0(3)I5(3a)affected
CiscoCisco NX-OS Software8.1(1a)affected
CiscoCisco NX-OS Software6.2(13a)affected
CiscoCisco NX-OS Software6.0(2)A8(8)affected
CiscoCisco NX-OS Software7.0(3)I7(5)affected
CiscoCisco NX-OS Software7.0(3)F3(3a)affected
CiscoCisco NX-OS Software6.0(2)A8(4)affected
CiscoCisco NX-OS Software6.0(2)A6(3a)affected
CiscoCisco NX-OS Software6.0(2)A6(5a)affected
CiscoCisco NX-OS Software7.0(3)F2(1)affected
CiscoCisco NX-OS Software7.0(3)I4(8a)affected
CiscoCisco NX-OS Software6.0(2)U6(9)affected
CiscoCisco NX-OS Software7.0(3)F3(2)affected
CiscoCisco NX-OS Software6.0(2)U6(2a)affected
CiscoCisco NX-OS Software6.2(12)affected
CiscoCisco NX-OS Software6.2(17)affected
CiscoCisco NX-OS Software7.0(3)I4(4)affected
CiscoCisco NX-OS Software6.2(23)affected
CiscoCisco NX-OS Software6.2(13b)affected
CiscoCisco NX-OS Software6.0(2)U6(3)affected
CiscoCisco NX-OS Software6.2(10)affected
CiscoCisco NX-OS Software6.2(6a)affected
CiscoCisco NX-OS Software6.2(6)affected
CiscoCisco NX-OS Software6.2(14)affected
CiscoCisco NX-OS Software7.0(3)I7(1)affected
CiscoCisco NX-OS Software6.2(14b)affected
CiscoCisco NX-OS Software6.2(21)affected
CiscoCisco NX-OS Software7.2(2)D1(1)affected
CiscoCisco NX-OS Software7.0(3)F2(2)affected
CiscoCisco NX-OS Software7.0(3)IA7(2)affected
CiscoCisco NX-OS Software7.0(3)IA7(1)affected
CiscoCisco NX-OS Software6.0(2)A8(7b)affected
CiscoCisco NX-OS Software6.2(8a)affected
CiscoCisco NX-OS Software6.2(11c)affected
CiscoCisco NX-OS Software7.0(3)F1(1)affected
CiscoCisco NX-OS Software6.0(2)A6(1a)affected
CiscoCisco NX-OS Software7.2(0)D1(1)affected
CiscoCisco NX-OS Software6.0(2)A6(2)affected
CiscoCisco NX-OS Software6.0(2)A8(4a)affected
CiscoCisco NX-OS Software6.2(20a)affected
CiscoCisco NX-OS Software6.0(2)U6(4)affected
CiscoCisco NX-OS Software8.4(1a)affected
CiscoCisco NX-OS Software9.3(3)affected
CiscoCisco NX-OS Software7.3(2)D1(1d)affected
CiscoCisco NX-OS Software6.2(24)affected
CiscoCisco NX-OS Software6.2(31)affected
CiscoCisco NX-OS Software7.0(3)I7(8)affected
CiscoCisco NX-OS Software6.0(2)U6(10a)affected
CiscoCisco NX-OS Software9.3(4)affected
CiscoCisco NX-OS Software7.3(6)D1(1)affected
CiscoCisco NX-OS Software6.2(26)affected
CiscoCisco NX-OS Software8.2(6)affected
CiscoCisco NX-OS Software6.2(33)affected
CiscoCisco NX-OS Software9.3(5)affected
CiscoCisco NX-OS Software8.4(2a)affected
CiscoCisco NX-OS Software8.4(2b)affected
CiscoCisco NX-OS Software7.0(3)I7(9)affected
CiscoCisco NX-OS Software6.2(24a)affected
CiscoCisco NX-OS Software8.5(1)affected
CiscoCisco NX-OS Software9.3(6)affected
CiscoCisco NX-OS Software10.1(2)affected
CiscoCisco NX-OS Software10.1(1)affected
CiscoCisco NX-OS Software8.4(4)affected
CiscoCisco NX-OS Software7.3(7)D1(1)affected
CiscoCisco NX-OS Software8.4(2c)affected
CiscoCisco NX-OS Software9.3(5w)affected
CiscoCisco NX-OS Software8.2(7)affected
CiscoCisco NX-OS Software9.3(7)affected
CiscoCisco NX-OS Software9.3(7k)affected
CiscoCisco NX-OS Software7.0(3)I7(9w)affected
CiscoCisco NX-OS Software10.2(1)affected
CiscoCisco NX-OS Software7.3(8)D1(1)affected
CiscoCisco NX-OS Software9.3(7a)affected
CiscoCisco NX-OS Software8.2(7a)affected
CiscoCisco NX-OS Software9.3(8)affected
CiscoCisco NX-OS Software8.4(4a)affected
CiscoCisco NX-OS Software8.4(2d)affected
CiscoCisco NX-OS Software8.4(5)affected
CiscoCisco NX-OS Software7.0(3)I7(10)affected
CiscoCisco NX-OS Software8.2(8)affected
CiscoCisco NX-OS Software10.2(1q)affected
CiscoCisco NX-OS Software10.2(2)affected
CiscoCisco NX-OS Software9.3(9)affected
CiscoCisco NX-OS Software10.1(2t)affected
CiscoCisco NX-OS Software7.3(9)D1(1)affected
CiscoCisco NX-OS Software10.2(3)affected
CiscoCisco NX-OS Software8.4(6)affected
CiscoCisco NX-OS Software10.2(3t)affected
CiscoCisco NX-OS Software8.4(2e)affected
CiscoCisco NX-OS Software9.3(10)affected
CiscoCisco NX-OS Software10.2(2a)affected
CiscoCisco NX-OS Software9.2(1a)affected
CiscoCisco NX-OS Software8.2(9)affected
CiscoCisco NX-OS Software10.3(1)affected
CiscoCisco NX-OS Software10.2(4)affected
CiscoCisco NX-OS Software8.4(7)affected
CiscoCisco NX-OS Software10.3(2)affected
CiscoCisco NX-OS Software8.4(6a)affected
CiscoCisco NX-OS Software9.3(11)affected
CiscoCisco NX-OS Software10.3(3)affected
CiscoCisco NX-OS Software10.2(5)affected
CiscoCisco NX-OS Software9.4(1)affected
CiscoCisco NX-OS Software9.3(2a)affected
CiscoCisco NX-OS Software8.4(2f)affected
CiscoCisco NX-OS Software8.2(10)affected
CiscoCisco NX-OS Software9.3(12)affected
CiscoCisco NX-OS Software10.2(3v)affected
CiscoCisco NX-OS Software10.4(1)affected
CiscoCisco NX-OS Software8.4(8)affected
CiscoCisco NX-OS Software10.3(99w)affected
CiscoCisco NX-OS Software10.2(6)affected
CiscoCisco NX-OS Software10.3(3w)affected
CiscoCisco NX-OS Software10.3(99x)affected
CiscoCisco NX-OS Software10.3(3o)affected
CiscoCisco NX-OS Software8.4(9)affected
CiscoCisco NX-OS Software10.3(4)affected
CiscoCisco NX-OS Software10.3(3p)affected
CiscoCisco NX-OS Software10.3(4a)affected
CiscoCisco NX-OS Software9.4(1a)affected
CiscoCisco NX-OS Software10.4(2)affected
CiscoCisco NX-OS Software10.3(3q)affected
CiscoCisco NX-OS Software9.3(13)affected
CiscoCisco NX-OS Software10.2(7)affected
CiscoCisco NX-OS Software10.3(3x)affected
CiscoCisco NX-OS Software10.3(4g)affected
CiscoCisco NX-OS Software10.3(3r)affected

Weaknesses

  • CWE-693: Protection Mechanism Failure

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References