8.8

CVE-2024-20285

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device.

The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. 
Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the  section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version9.3(13)
   Cisco ≫ N9k-c92160yc-x Version-
   Cisco ≫ N9k-c92300yc Version-
   Cisco ≫ N9k-c92304qc Version-
   Cisco ≫ N9k-c9232c Version-
   Cisco ≫ N9k-c92348gc-x Version-
   Cisco ≫ N9k-c9236c Version-
   Cisco ≫ N9k-c9272q Version-
   Cisco ≫ N9k-c93108tc-ex Version-
   Cisco ≫ N9k-c93108tc-fx Version-
   Cisco ≫ N9k-c93120tx Version-
   Cisco ≫ N9k-c93128tx Version-
   Cisco ≫ N9k-c9316d-gx Version-
   Cisco ≫ N9k-c93180lc-ex Version-
   Cisco ≫ N9k-c93180yc-ex Version-
   Cisco ≫ N9k-c93180yc-fx Version-
   Cisco ≫ N9k-c93180yc2-fx Version-
   Cisco ≫ N9k-c93216tc-fx2 Version-
   Cisco ≫ N9k-c93240yc-fx2 Version-
   Cisco ≫ N9k-c9332c Version-
   Cisco ≫ N9k-c9332d-gx2b Version-
   Cisco ≫ N9k-c9332pq Version-
   Cisco ≫ N9k-c93360yc-fx2 Version-
   Cisco ≫ N9k-c9336c-fx2 Version-
   Cisco ≫ N9k-c9348d-gx2a Version-
   Cisco ≫ N9k-c9348gc-fxp Version-
   Cisco ≫ N9k-c93600cd-gx Version-
   Cisco ≫ N9k-c9364c Version-
   Cisco ≫ N9k-c9364c-gx Version-
   Cisco ≫ N9k-c9364d-gx2a Version-
   Cisco ≫ N9k-c9372px Version-
   Cisco ≫ N9k-c9372px-e Version-
   Cisco ≫ N9k-c9372tx Version-
   Cisco ≫ N9k-c9372tx-e Version-
   Cisco ≫ N9k-c9396px Version-
   Cisco ≫ N9k-c9396tx Version-
   Cisco ≫ N9k-c9504 Version-
   Cisco ≫ N9k-c9504-fm-r Version-
   Cisco ≫ N9k-c9508 Version-
   Cisco ≫ N9k-c9508-fm-r Version-
   Cisco ≫ N9k-c9516 Version-
   Cisco ≫ N9k-sc-a Version-
   Cisco ≫ N9k-sup-a Version-
   Cisco ≫ N9k-sup-a+ Version-
   Cisco ≫ N9k-sup-b Version-
   Cisco ≫ N9k-sup-b+ Version-
   Cisco ≫ N9k-x9400-16w Version-
   Cisco ≫ N9k-x9400-22l Version-
   Cisco ≫ N9k-x9400-8d Version-
   Cisco ≫ N9k-x9432c-s Version-
   Cisco ≫ N9k-x9464px Version-
   Cisco ≫ N9k-x9464tx2 Version-
   Cisco ≫ N9k-x9564px Version-
   Cisco ≫ N9k-x9564tx Version-
   Cisco ≫ N9k-x96136yc-r Version-
   Cisco ≫ N9k-x9636c-r Version-
   Cisco ≫ N9k-x9636c-rx Version-
   Cisco ≫ N9k-x9636q-r Version-
   Cisco ≫ N9k-x97160yc-ex Version-
   Cisco ≫ N9k-x97284yc-fx Version-
   Cisco ≫ N9k-x9732c-ex Version-
   Cisco ≫ N9k-x9732c-fx Version-
   Cisco ≫ N9k-x9736c-ex Version-
   Cisco ≫ N9k-x9736c-fx Version-
   Cisco ≫ N9k-x9788tc-fx Version-
   Cisco ≫ Nexus 3000 Version-
   Cisco ≫ Nexus 3000 Series Version-
   Cisco ≫ Nexus 3016 Version-
   Cisco ≫ Nexus 3016q Version-
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064-32t Version-
   Cisco ≫ Nexus 3064-t Version-
   Cisco ≫ Nexus 3064-x Version-
   Cisco ≫ Nexus 3064t Version-
   Cisco ≫ Nexus 3064x Version-
   Cisco ≫ Nexus 3100 Version-
   Cisco ≫ Nexus 3100-v Version-
   Cisco ≫ Nexus 3100-z Version-
   Cisco ≫ Nexus 3100v Version-
   Cisco ≫ Nexus 31108pc-v Version-
   Cisco ≫ Nexus 31108pv-v Version-
   Cisco ≫ Nexus 31108tc-v Version-
   Cisco ≫ Nexus 31128pq Version-
   Cisco ≫ Nexus 3132c-z Version-
   Cisco ≫ Nexus 3132q Version-
   Cisco ≫ Nexus 3132q-v Version-
   Cisco ≫ Nexus 3132q-x Version-
   Cisco ≫ Nexus 3132q-x/3132q-xl Version-
   Cisco ≫ Nexus 3132q-xl Version-
   Cisco ≫ Nexus 3164q Version-
   Cisco ≫ Nexus 3172 Version-
   Cisco ≫ Nexus 3172pq Version-
   Cisco ≫ Nexus 3172pq-xl Version-
   Cisco ≫ Nexus 3172pq/pq-xl Version-
   Cisco ≫ Nexus 3172tq Version-
   Cisco ≫ Nexus 3172tq-32t Version-
   Cisco ≫ Nexus 3172tq-xl Version-
   Cisco ≫ Nexus 3200 Version-
   Cisco ≫ Nexus 3232 Version-
   Cisco ≫ Nexus 3232c Version-
   Cisco ≫ Nexus 3232c Version-
   Cisco ≫ Nexus 3264c-e Version-
   Cisco ≫ Nexus 3264q Version-
   Cisco ≫ Nexus 3400 Version-
   Cisco ≫ Nexus 3408-s Version-
   Cisco ≫ Nexus 34180yc Version-
   Cisco ≫ Nexus 34200yc-sm Version-
   Cisco ≫ Nexus 3432d-s Version-
   Cisco ≫ Nexus 3464c Version-
   Cisco ≫ Nexus 3500 Version-
   Cisco ≫ Nexus 3500 Platform Version-
   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3524-x Version-
   Cisco ≫ Nexus 3524-x/xl Version-
   Cisco ≫ Nexus 3524-xl Version-
   Cisco ≫ Nexus 3548 Version-
   Cisco ≫ Nexus 3548-x Version-
   Cisco ≫ Nexus 3548-x/xl Version-
   Cisco ≫ Nexus 3548-xl Version-
   Cisco ≫ Nexus 3600 Version-
   Cisco ≫ Nexus 36180yc-r Version-
   Cisco ≫ Nexus 3636c-r Version-
   Cisco ≫ Nexus 9000 Version-
   Cisco ≫ Nexus 9000 In Aci Mode Version-
   Cisco ≫ Nexus 9000 In Standalone Version-
   Cisco ≫ Nexus 9000 In Standalone Nx-os Mode Version-
   Cisco ≫ Nexus 9000v Version-
   Cisco ≫ Nexus 9200 Version-
   Cisco ≫ Nexus 9200yc Version-
   Cisco ≫ Nexus 92160yc-x Version-
   Cisco ≫ Nexus 92160yc Switch Version-
   Cisco ≫ Nexus 9221c Version-
   Cisco ≫ Nexus 92300yc Version-
   Cisco ≫ Nexus 92300yc Switch Version-
   Cisco ≫ Nexus 92304qc Version-
   Cisco ≫ Nexus 92304qc Switch Version-
   Cisco ≫ Nexus 9232e Version-
   Cisco ≫ Nexus 92348gc-x Version-
   Cisco ≫ Nexus 9236c Version-
   Cisco ≫ Nexus 9236c Switch Version-
   Cisco ≫ Nexus 9272q Version-
   Cisco ≫ Nexus 9272q Switch Version-
   Cisco ≫ Nexus 9300 Version-
   Cisco ≫ Nexus 93108tc-ex Version-
   Cisco ≫ Nexus 93108tc-ex-24 Version-
   Cisco ≫ Nexus 93108tc-ex Switch Version-
   Cisco ≫ Nexus 93108tc-fx Version-
   Cisco ≫ Nexus 93108tc-fx-24 Version-
   Cisco ≫ Nexus 93108tc-fx3 Version-
   Cisco ≫ Nexus 93108tc-fx3h Version-
   Cisco ≫ Nexus 93108tc-fx3p Version-
   Cisco ≫ Nexus 93120tx Version-
   Cisco ≫ Nexus 93120tx Switch Version-
   Cisco ≫ Nexus 93128 Version-
   Cisco ≫ Nexus 93128tx Version-
   Cisco ≫ Nexus 93128tx Switch Version-
   Cisco ≫ Nexus 9316d-gx Version-
   Cisco ≫ Nexus 93180lc-ex Version-
   Cisco ≫ Nexus 93180lc-ex Switch Version-
   Cisco ≫ Nexus 93180tc-ex Version-
   Cisco ≫ Nexus 93180yc-ex Version-
   Cisco ≫ Nexus 93180yc-ex-24 Version-
   Cisco ≫ Nexus 93180yc-ex Switch Version-
   Cisco ≫ Nexus 93180yc-fx Version-
   Cisco ≫ Nexus 93180yc-fx-24 Version-
   Cisco ≫ Nexus 93180yc-fx3 Version-
   Cisco ≫ Nexus 93180yc-fx3h Version-
   Cisco ≫ Nexus 93180yc-fx3s Version-
   Cisco ≫ Nexus 93216tc-fx2 Version-
   Cisco ≫ Nexus 93240tc-fx2 Version-
   Cisco ≫ Nexus 93240yc-fx2 Version-
   Cisco ≫ Nexus 9332c Version-
   Cisco ≫ Nexus 9332d-gx2b Version-
   Cisco ≫ Nexus 9332d-h2r Version-
   Cisco ≫ Nexus 9332pq Version-
   Cisco ≫ Nexus 9332pq Switch Version-
   Cisco ≫ Nexus 93360yc-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2-e Version-
   Cisco ≫ Nexus 9336pq Version-
   Cisco ≫ Nexus 9336pq Aci Version-
   Cisco ≫ Nexus 9336pq Aci Spine Version-
   Cisco ≫ Nexus 9336pq Aci Spine Switch Version-
   Cisco ≫ Nexus 93400ld-h1 Version-
   Cisco ≫ Nexus 9348d-gx2a Version-
   Cisco ≫ Nexus 9348gc-fx3 Version-
   Cisco ≫ Nexus 9348gc-fx3ph Version-
   Cisco ≫ Nexus 9348gc-fxp Version-
   Cisco ≫ Nexus 93600cd-gx Version-
   Cisco ≫ Nexus 9364c Version-
   Cisco ≫ Nexus 9364c-gx Version-
   Cisco ≫ Nexus 9364c-h1 Version-
   Cisco ≫ Nexus 9364d-gx2a Version-
   Cisco ≫ Nexus 9372px Version-
   Cisco ≫ Nexus 9372px-e Version-
   Cisco ≫ Nexus 9372px-e Switch Version-
   Cisco ≫ Nexus 9372px Switch Version-
   Cisco ≫ Nexus 9372tx Version-
   Cisco ≫ Nexus 9372tx-e Version-
   Cisco ≫ Nexus 9372tx-e Switch Version-
   Cisco ≫ Nexus 9372tx Switch Version-
   Cisco ≫ Nexus 9396px Version-
   Cisco ≫ Nexus 9396px Switch Version-
   Cisco ≫ Nexus 9396tx Version-
   Cisco ≫ Nexus 9396tx Switch Version-
   Cisco ≫ Nexus 9408 Version-
   Cisco ≫ Nexus 9432pq Version-
   Cisco ≫ Nexus 9500 Version-
   Cisco ≫ Nexus 9500 16-slot Version-
   Cisco ≫ Nexus 9500 4-slot Version-
   Cisco ≫ Nexus 9500 8-slot Version-
   Cisco ≫ Nexus 9500 Supervisor A Version-
   Cisco ≫ Nexus 9500 Supervisor A+ Version-
   Cisco ≫ Nexus 9500 Supervisor B Version-
   Cisco ≫ Nexus 9500 Supervisor B+ Version-
   Cisco ≫ Nexus 9500r Version-
   Cisco ≫ Nexus 9504 Version-
   Cisco ≫ Nexus 9504 Switch Version-
   Cisco ≫ Nexus 9508 Version-
   Cisco ≫ Nexus 9508 Switch Version-
   Cisco ≫ Nexus 9516 Version-
   Cisco ≫ Nexus 9516 Switch Version-
   Cisco ≫ Nexus 9536pq Version-
   Cisco ≫ Nexus 9636pq Version-
   Cisco ≫ Nexus 9716d-gx Version-
   Cisco ≫ Nexus 9736pq Version-
   Cisco ≫ Nexus 9800 Version-
   Cisco ≫ Nexus 9800 34-port 100g And 14-port 400g Line Card Version-
   Cisco ≫ Nexus 9800 36-port 400g Line Card Version-
   Cisco ≫ Nexus 9804 Version-
   Cisco ≫ Nexus 9808 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.242
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
psirt@cisco.com 5.3 1.8 3.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CWE-653 Improper Isolation or Compartmentalization

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.