CVE-2024-20284: Cisco NX-OS Software Python Parser Escape Vulnerability

First published: Wed Aug 28 2024(Updated: )

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/title
• agent/references
• agent/description
• agent/type
• agent/first-publish-date
• agent/author
• agent/event
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/last-modified-date
• agent/softwarecombine
• agent/tags
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• vendor/cisco
• canonical/cisco nx-os
• version/cisco nx-os/9.3\(13\)
• canonical/cisco n9k-c92160yc-x
• canonical/cisco n9k-c92300yc
• canonical/cisco n9k-c92304qc
• canonical/cisco n9k-c9232c
• canonical/cisco n9k-c92348gc-x
• canonical/cisco n9k-c9236c
• canonical/cisco n9k-c9272q
• canonical/cisco n9k-c93108tc-ex
• canonical/cisco n9k-c93108tc-fx
• canonical/cisco n9k-c93120tx
• canonical/cisco n9k-c93128tx
• canonical/cisco n9k-c9316d-gx
• canonical/cisco n9k-c93180lc-ex
• canonical/cisco n9k-c93180yc-ex
• canonical/cisco n9k-c93180yc-fx
• canonical/cisco n9k-c93180yc2-fx
• canonical/cisco n9k-c93216tc-fx2
• canonical/cisco n9k-c93240yc-fx2
• canonical/cisco n9k-c9332c
• canonical/cisco n9k-c9332d-gx2b
• canonical/cisco n9k-c9332pq
• canonical/cisco n9k-c93360yc-fx2
• canonical/cisco n9k-c9336c-fx2
• canonical/cisco n9k-c9348d-gx2a
• canonical/cisco n9k-c9348gc-fxp
• canonical/cisco n9k-c93600cd-gx
• canonical/cisco n9k-c9364c
• canonical/cisco n9k-c9364c-gx
• canonical/cisco n9k-c9364d-gx2a
• canonical/cisco n9k-c9372px
• canonical/cisco n9k-c9372px-e
• canonical/cisco n9k-c9372tx
• canonical/cisco n9k-c9372tx-e
• canonical/cisco n9k-c9396px
• canonical/cisco n9k-c9396tx
• canonical/cisco n9k-c9504
• canonical/cisco n9k-c9504-fm-r
• canonical/cisco n9k-c9508
• canonical/cisco n9k-c9508-fm-r
• canonical/cisco n9k-c9516
• canonical/cisco n9k-sc-a
• canonical/cisco n9k-sup-a
• canonical/cisco n9k-sup-a\+
• canonical/cisco n9k-sup-b
• canonical/cisco n9k-sup-b\+
• canonical/cisco n9k-x9400-16w
• canonical/cisco n9k-x9400-22l
• canonical/cisco n9k-x9400-8d
• canonical/cisco n9k-x9432c-s
• canonical/cisco n9k-x9464px
• canonical/cisco n9k-x9464tx2
• canonical/cisco n9k-x9564px
• canonical/cisco n9k-x9564tx
• canonical/cisco n9k-x96136yc-r
• canonical/cisco n9k-x9636c-r
• canonical/cisco n9k-x9636c-rx
• canonical/cisco n9k-x9636q-r
• canonical/cisco n9k-x97160yc-ex
• canonical/cisco n9k-x97284yc-fx
• canonical/cisco n9k-x9732c-ex
• canonical/cisco n9k-x9732c-fx
• canonical/cisco n9k-x9736c-ex
• canonical/cisco n9k-x9736c-fx
• canonical/cisco n9k-x9788tc-fx
• canonical/cisco nexus 3000
• canonical/cisco nexus 3000 series
• canonical/cisco nexus 3016
• canonical/cisco nexus 3016q
• canonical/cisco nexus 3048
• canonical/cisco nexus 3064
• canonical/cisco nexus 3064-32t
• canonical/cisco nexus 3064-t
• canonical/cisco nexus 3064-x
• canonical/cisco nexus 3064t
• canonical/cisco nexus 3064x
• canonical/cisco nexus 3100
• canonical/cisco nexus 3100-v
• canonical/cisco nexus 3100-z
• canonical/cisco nexus 3100v
• canonical/cisco nexus 31108pc-v
• canonical/cisco nexus 31108pv-v
• canonical/cisco nexus 31108tc-v
• canonical/cisco nexus 31128pq
• canonical/cisco nexus 3132c-z
• canonical/cisco nexus 3132q
• canonical/cisco nexus 3132q-v
• canonical/cisco nexus 3132q-x
• canonical/cisco nexus 3132q-x\/3132q-xl
• canonical/cisco nexus 3132q-xl
• canonical/cisco nexus 3164q
• canonical/cisco nexus 3172
• canonical/cisco nexus 3172pq
• canonical/cisco nexus 3172pq-xl
• canonical/cisco nexus 3172pq\/pq-xl
• canonical/cisco nexus 3172tq
• canonical/cisco nexus 3172tq-32t
• canonical/cisco nexus 3172tq-xl
• canonical/cisco nexus 3200
• canonical/cisco nexus 3232
• canonical/cisco nexus 3232c
• canonical/cisco nexus 3264c-e
• canonical/cisco nexus 3264q
• canonical/cisco nexus 3400
• canonical/cisco nexus 3408-s
• canonical/cisco nexus 34180yc
• canonical/cisco nexus 34200yc-sm
• canonical/cisco nexus 3432d-s
• canonical/cisco nexus 3464c
• canonical/cisco nexus 3500
• canonical/cisco nexus 3500 platform
• canonical/cisco nexus 3524
• canonical/cisco nexus 3524-x
• canonical/cisco nexus 3524-x\/xl
• canonical/cisco nexus 3524-xl
• canonical/cisco nexus 3548
• canonical/cisco nexus 3548-x
• canonical/cisco nexus 3548-x\/xl
• canonical/cisco nexus 3548-xl
• canonical/cisco nexus 3600
• canonical/cisco nexus 36180yc-r
• canonical/cisco nexus 3636c-r
• canonical/cisco nexus 9000
• canonical/cisco nexus 9000 in aci mode
• canonical/cisco nexus 9000 in standalone
• canonical/cisco nexus 9000 in standalone nx-os mode
• canonical/cisco nexus 9000v
• canonical/cisco nexus 9200
• canonical/cisco nexus 9200yc
• canonical/cisco nexus 92160yc-x
• canonical/cisco nexus 92160yc switch
• canonical/cisco nexus 9221c
• canonical/cisco nexus 92300yc
• canonical/cisco nexus 92300yc switch
• canonical/cisco nexus 92304qc
• canonical/cisco nexus 92304qc switch
• canonical/cisco nexus 9232e
• canonical/cisco nexus 92348gc-x
• canonical/cisco nexus 9236c
• canonical/cisco nexus 9236c switch
• canonical/cisco nexus 9272q
• canonical/cisco nexus 9272q switch
• canonical/cisco nexus 9300
• canonical/cisco nexus 93108tc-ex
• canonical/cisco nexus 93108tc-ex-24
• canonical/cisco nexus 93108tc-ex switch
• canonical/cisco nexus 93108tc-fx
• canonical/cisco nexus 93108tc-fx-24
• canonical/cisco nexus 93108tc-fx3
• canonical/cisco nexus 93108tc-fx3h
• canonical/cisco nexus 93108tc-fx3p
• canonical/cisco nexus 93120tx
• canonical/cisco nexus 93120tx switch
• canonical/cisco nexus 93128
• canonical/cisco nexus 93128tx
• canonical/cisco nexus 93128tx switch
• canonical/cisco nexus 9316d-gx
• canonical/cisco nexus 93180lc-ex
• canonical/cisco nexus 93180lc-ex switch
• canonical/cisco nexus 93180tc-ex
• canonical/cisco nexus 93180yc-ex
• canonical/cisco nexus 93180yc-ex-24
• canonical/cisco nexus 93180yc-ex switch
• canonical/cisco nexus 93180yc-fx
• canonical/cisco nexus 93180yc-fx-24
• canonical/cisco nexus 93180yc-fx3
• canonical/cisco nexus 93180yc-fx3h
• canonical/cisco nexus 93180yc-fx3s
• canonical/cisco nexus 93216tc-fx2
• canonical/cisco nexus 93240tc-fx2
• canonical/cisco nexus 93240yc-fx2
• canonical/cisco nexus 9332c
• canonical/cisco nexus 9332d-gx2b
• canonical/cisco nexus 9332d-h2r
• canonical/cisco nexus 9332pq
• canonical/cisco nexus 9332pq switch
• canonical/cisco nexus 93360yc-fx2
• canonical/cisco nexus 9336c-fx2
• canonical/cisco nexus 9336c-fx2-e
• canonical/cisco nexus 9336pq
• canonical/cisco nexus 9336pq aci
• canonical/cisco nexus 9336pq aci spine
• canonical/cisco nexus 9336pq aci spine switch
• canonical/cisco nexus 93400ld-h1
• canonical/cisco nexus 9348d-gx2a
• canonical/cisco nexus 9348gc-fx3
• canonical/cisco nexus 9348gc-fx3ph
• canonical/cisco nexus 9348gc-fxp
• canonical/cisco nexus 93600cd-gx
• canonical/cisco nexus 9364c
• canonical/cisco nexus 9364c-gx
• canonical/cisco nexus 9364c-h1
• canonical/cisco nexus 9364d-gx2a
• canonical/cisco nexus 9372px
• canonical/cisco nexus 9372px-e
• canonical/cisco nexus 9372px-e switch
• canonical/cisco nexus 9372px switch
• canonical/cisco nexus 9372tx
• canonical/cisco nexus 9372tx-e
• canonical/cisco nexus 9372tx-e switch
• canonical/cisco nexus 9372tx switch
• canonical/cisco nexus 9396px
• canonical/cisco nexus 9396px switch
• canonical/cisco nexus 9396tx
• canonical/cisco nexus 9396tx switch
• canonical/cisco nexus 9408
• canonical/cisco nexus 9432pq
• canonical/cisco nexus 9500
• canonical/cisco nexus 9500 16-slot
• canonical/cisco nexus 9500 4-slot
• canonical/cisco nexus 9500 8-slot
• canonical/cisco nexus 9500 supervisor a
• canonical/cisco nexus 9500 supervisor a\+
• canonical/cisco nexus 9500 supervisor b
• canonical/cisco nexus 9500 supervisor b\+
• canonical/cisco nexus 9500r
• canonical/cisco nexus 9504
• canonical/cisco nexus 9504 switch
• canonical/cisco nexus 9508
• canonical/cisco nexus 9508 switch
• canonical/cisco nexus 9516
• canonical/cisco nexus 9516 switch
• canonical/cisco nexus 9536pq
• canonical/cisco nexus 9636pq
• canonical/cisco nexus 9716d-gx
• canonical/cisco nexus 9736pq
• canonical/cisco nexus 9800
• canonical/cisco nexus 9800 34-port 100g and 14-port 400g line card
• canonical/cisco nexus 9800 36-port 400g line card
• canonical/cisco nexus 9804
• canonical/cisco nexus 9808