Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-20284

Cisco NX-OS Software Python Parser Escape Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco NX-OS Software

Default version status: unknown

  • 8.2(5)affected
  • 7.3(6)N1(1a)affected
  • 7.3(5)D1(1)affected
  • 8.4(2)affected
  • 7.3(6)N1(1)affected
  • 6.2(2)affected
  • 8.4(3)affected
  • 9.2(3)affected
  • 7.0(3)I5(2)affected
  • 8.2(1)affected
  • 6.0(2)A8(7a)affected
  • 7.0(3)I4(5)affected
  • 6.0(2)A6(1)affected
  • 7.3(1)D1(1)affected
  • 6.2(14a)affected
  • 7.0(3)I4(6)affected
  • 7.3(4)N1(1)affected
  • 7.0(3)I4(3)affected
  • 9.2(2v)affected
  • 6.0(2)A6(5b)affected
  • 7.3(0)D1(1)affected
  • 6.2(17a)affected
  • 7.0(3)I4(7)affected
  • 6.0(2)U6(1a)affected
  • 7.1(5)N1(1b)affected
  • 7.0(3)I4(1)affected
  • 7.0(3)I4(8)affected
  • 7.0(3)I4(2)affected
  • 7.1(4)N1(1c)affected
  • 7.0(3)IM3(1)affected
  • 6.0(2)U6(5a)affected
  • 6.0(2)A8(11)affected
  • 6.0(2)A6(4a)affected
  • 6.2(9)affected
  • 6.2(5)affected
  • 7.3(4)D1(1)affected
  • 6.2(20)affected
  • 9.2(1)affected
  • 9.2(2t)affected
  • 9.2(3y)affected
  • 7.0(3)I4(1t)affected
  • 6.0(2)U6(5c)affected
  • 6.0(2)A6(4)affected
  • 7.0(3)I7(6z)affected
  • 9.3(2)affected
  • 7.3(1)DY(1)affected
  • 7.0(3)F3(3)affected
  • 6.0(2)U6(6)affected
  • 6.2(29)affected
  • 7.0(3)I7(3z)affected
  • 7.0(3)IM7(2)affected
  • 6.0(2)A8(11b)affected
  • 6.2(9a)affected
  • 7.3(0)N1(1)affected
  • 7.0(3)I7(5a)affected
  • 6.2(11d)affected
  • 8.1(1)affected
  • 7.0(3)I6(1)affected
  • 6.0(2)U6(10)affected
  • 7.2(2)D1(2)affected
  • 7.0(3)IM3(2)affected
  • 6.0(2)A6(8)affected
  • 8.2(2)affected
  • 6.0(2)U6(1)affected
  • 7.3(2)N1(1c)affected
  • 7.0(3)I5(3b)affected
  • 8.3(2)affected
  • 7.3(5)N1(1)affected
  • 6.0(2)A6(2a)affected
  • 7.3(2)N1(1b)affected
  • 6.2(27)affected
  • 7.3(2)D1(3a)affected
  • 7.3(1)N1(1)affected
  • 6.0(2)U6(7)affected
  • 9.2(4)affected
  • 7.1(4)N1(1a)affected
  • 7.1(3)N1(4)affected
  • 7.0(3)IM3(2a)affected
  • 6.2(8b)affected
  • 6.0(2)A8(10)affected
  • 7.1(3)N1(2)affected
  • 6.2(13)affected
  • 6.0(2)A8(2)affected
  • 7.0(3)IC4(4)affected
  • 6.2(1)affected
  • 7.3(4)N1(1a)affected
  • 8.1(2)affected
  • 6.0(2)A6(3)affected
  • 6.0(2)U6(5b)affected
  • 7.0(3)F3(3c)affected
  • 7.3(3)D1(1)affected
  • 7.0(3)F3(1)affected
  • 6.0(2)U6(5)affected
  • 7.0(3)F3(5)affected
  • 7.1(2)N1(1)affected
  • 7.1(3)N1(3)affected
  • 8.2(3)affected
  • 6.0(2)A6(7)affected
  • 7.0(3)I7(2)affected
  • 6.2(5a)affected
  • 6.2(18)affected
  • 6.0(2)A6(5)affected
  • 7.0(3)IM3(2b)affected
  • 7.1(3)N1(1)affected
  • 6.0(2)U6(4a)affected
  • 7.0(3)I5(3)affected
  • 7.0(3)I7(3)affected
  • 6.0(2)A8(6)affected
  • 7.0(3)I6(2)affected
  • 8.3(1)affected
  • 6.2(3)affected
  • 6.2(22)affected
  • 7.1(1)N1(1)affected
  • 8.4(1)affected
  • 8.1(1b)affected
  • 7.3(0)N1(1b)affected
  • 7.2(2)D1(4)affected
  • 6.0(2)A8(5)affected
  • 7.3(0)DX(1)affected
  • 7.1(4)N1(1d)affected
  • 7.3(2)D1(1)affected
  • 7.3(2)N1(1)affected
  • 6.0(2)U6(8)affected
  • 7.1(1)N1(1a)affected
  • 7.0(3)IM3(3)affected
  • 9.3(1)affected
  • 6.0(2)U6(2)affected
  • 6.2(9b)affected
  • 7.1(3)N1(2a)affected
  • 7.3(0)N1(1a)affected
  • 6.0(2)A8(7)affected
  • 7.0(3)I7(6)affected
  • 7.3(2)D1(2)affected
  • 6.2(25)affected
  • 6.0(2)U6(3a)affected
  • 8.0(1)affected
  • 6.0(2)A8(11a)affected
  • 6.2(11e)affected
  • 7.1(3)N1(5)affected
  • 7.0(3)I4(8z)affected
  • 6.2(11)affected
  • 7.0(3)I4(9)affected
  • 6.2(16)affected
  • 6.2(19)affected
  • 8.2(4)affected
  • 6.2(2a)affected
  • 7.2(2)D1(3)affected
  • 7.1(0)N1(1b)affected
  • 7.0(3)I7(4)affected
  • 7.0(3)I7(7)affected
  • 6.2(5b)affected
  • 7.3(0)DY(1)affected
  • 6.0(2)A8(9)affected
  • 6.0(2)A8(1)affected
  • 7.1(5)N1(1)affected
  • 7.2(1)D1(1)affected
  • 6.2(15)affected
  • 6.0(2)A6(6)affected
  • 6.0(2)A8(10a)affected
  • 7.0(3)I5(1)affected
  • 9.3(1z)affected
  • 9.2(2)affected
  • 6.2(7)affected
  • 6.2(9c)affected
  • 7.0(3)F3(4)affected
  • 7.3(3)N1(1)affected
  • 6.2(6b)affected
  • 7.0(3)I4(8b)affected
  • 8.1(2a)affected
  • 7.3(2)D1(3)affected
  • 6.2(8)affected
  • 6.0(2)A8(3)affected
  • 6.2(11b)affected
  • 7.0(3)I4(6t)affected
  • 7.0(3)I5(3a)affected
  • 8.1(1a)affected
  • 6.2(13a)affected
  • 6.0(2)A8(8)affected
  • 7.0(3)I7(5)affected
  • 7.0(3)F3(3a)affected
  • 7.1(0)N1(1a)affected
  • 6.0(2)A8(4)affected
  • 6.0(2)A6(3a)affected
  • 6.0(2)A6(5a)affected
  • 7.0(3)F2(1)affected
  • 7.0(3)I4(8a)affected
  • 6.0(2)U6(9)affected
  • 7.0(3)F3(2)affected
  • 6.0(2)U6(2a)affected
  • 6.2(12)affected
  • 6.2(17)affected
  • 7.0(3)I4(4)affected
  • 6.2(23)affected
  • 6.2(13b)affected
  • 6.0(2)U6(3)affected
  • 6.2(10)affected
  • 6.2(6a)affected
  • 6.2(6)affected
  • 7.1(2)N1(1a)affected
  • 6.2(14)affected
  • 7.0(3)I7(1)affected
  • 6.2(14b)affected
  • 6.2(21)affected
  • 7.2(2)D1(1)affected
  • 7.0(3)F2(2)affected
  • 7.0(3)IA7(2)affected
  • 7.0(3)IA7(1)affected
  • 6.0(2)A8(7b)affected
  • 6.2(8a)affected
  • 6.2(11c)affected
  • 7.0(3)F1(1)affected
  • 6.0(2)A6(1a)affected
  • 7.1(0)N1(1)affected
  • 7.2(0)D1(1)affected
  • 6.0(2)A6(2)affected
  • 7.1(4)N1(1)affected
  • 6.0(2)A8(4a)affected
  • 6.2(20a)affected
  • 6.0(2)U6(4)affected
  • 8.4(1a)affected
  • 9.3(3)affected
  • 7.3(2)D1(1d)affected
  • 7.3(7)N1(1)affected
  • 6.2(24)affected
  • 6.2(31)affected
  • 7.0(3)I7(8)affected
  • 6.0(2)U6(10a)affected
  • 7.3(7)N1(1a)affected
  • 9.3(4)affected
  • 7.3(6)D1(1)affected
  • 6.2(26)affected
  • 8.2(6)affected
  • 6.2(33)affected
  • 9.3(5)affected
  • 8.4(2a)affected
  • 8.4(2b)affected
  • 7.3(8)N1(1)affected
  • 7.0(3)I7(9)affected
  • 7.3(7)N1(1b)affected
  • 6.2(24a)affected
  • 8.5(1)affected
  • 9.3(6)affected
  • 10.1(2)affected
  • 10.1(1)affected
  • 8.4(4)affected
  • 7.3(7)D1(1)affected
  • 8.4(2c)affected
  • 9.3(5w)affected
  • 8.2(7)affected
  • 7.3(9)N1(1)affected
  • 9.3(7)affected
  • 9.3(7k)affected
  • 7.0(3)I7(9w)affected
  • 10.2(1)affected
  • 7.3(8)N1(1a)affected
  • 7.3(8)D1(1)affected
  • 9.3(7a)affected
  • 8.2(7a)affected
  • 9.3(8)affected
  • 8.4(4a)affected
  • 8.4(2d)affected
  • 7.3(10)N1(1)affected
  • 8.4(5)affected
  • 7.0(3)I7(10)affected
  • 7.3(8)N1(1b)affected
  • 8.2(8)affected
  • 10.2(1q)affected
  • 10.2(2)affected
  • 9.3(9)affected
  • 10.1(2t)affected
  • 7.3(9)D1(1)affected
  • 7.3(11)N1(1)affected
  • 10.2(3)affected
  • 8.4(6)affected
  • 10.2(3t)affected
  • 8.4(2e)affected
  • 9.3(10)affected
  • 7.3(11)N1(1a)affected
  • 10.2(2a)affected
  • 7.3(12)N1(1)affected
  • 9.2(1a)affected
  • 8.2(9)affected
  • 10.3(1)affected
  • 10.2(4)affected
  • 7.3(13)N1(1)affected
  • 8.4(7)affected
  • 10.3(2)affected
  • 8.4(6a)affected
  • 9.3(11)affected
  • 10.3(3)affected
  • 10.2(5)affected
  • 9.4(1)affected
  • 9.3(2a)affected
  • 8.4(2f)affected
  • 8.2(10)affected
  • 9.3(12)affected
  • 10.2(3v)affected
  • 10.4(1)affected
  • 8.4(8)affected
  • 10.3(99w)affected
  • 7.3(14)N1(1)affected
  • 10.2(6)affected
  • 10.3(3w)affected
  • 10.3(99x)affected
  • 10.3(3o)affected
  • 8.4(9)affected
  • 10.3(4)affected
  • 10.3(3p)affected
  • 10.3(4a)affected
  • 9.4(1a)affected
  • 10.4(2)affected
  • 10.3(3q)affected
  • 9.3(13)affected
  • 8.2(11)affected
  • 10.3(5)affected
  • 10.2(7)affected
  • 10.4(3)affected
  • 10.3(3x)affected
  • 10.3(4g)affected
  • 10.3(3r)affected

References