CVE-2024-20285 — Cisco NX-OS Software Python Parser Escape Vulnerability

Description (CNA)

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco NX-OS Software	affected 7.3(6)N1(1a); affected 8.4(2); affected 7.3(6)N1(1); affected 9.2(3); affected 7.0(3)I5(2); affected 8.2(1); affected 6.0(2)A8(7a); affected 7.0(3)I4(5); affected 6.0(2)A6(1); affected 7.3(1)D1(1); affected 7.0(3)I4(6); affected 7.3(4)N1(1); affected 7.0(3)I4(3); affected 9.2(2v); affected 6.0(2)A6(5b); affected 7.3(0)D1(1); affected 6.2(17a); affected 7.0(3)I4(7); affected 6.0(2)U6(1a); affected 7.1(5)N1(1b); affected 7.0(3)I4(1); affected 7.0(3)I4(8); affected 7.0(3)I4(2); affected 7.1(4)N1(1c); affected 7.0(3)IM3(1); affected 6.0(2)U6(5a); affected 6.0(2)A8(11); affected 6.0(2)A6(4a); affected 6.2(9); affected 6.2(5); affected 9.2(1); affected 9.2(2t); affected 9.2(3y); affected 7.0(3)I4(1t); affected 6.0(2)U6(5c); affected 6.0(2)A6(4); affected 7.0(3)I7(6z); affected 9.3(2); affected 7.3(1)DY(1); affected 7.0(3)F3(3); affected 6.0(2)U6(6); affected 6.2(29); affected 7.0(3)I7(3z); affected 7.0(3)IM7(2); affected 6.0(2)A8(11b); affected 6.2(9a); affected 7.3(0)N1(1); affected 7.0(3)I7(5a); affected 6.2(11d); affected 7.0(3)I6(1); affected 6.0(2)U6(10); affected 7.0(3)IM3(2); affected 6.0(2)A6(8); affected 6.0(2)U6(1); affected 7.3(2)N1(1c); affected 7.0(3)I5(3b); affected 7.3(5)N1(1); affected 6.0(2)A6(2a); affected 7.3(2)N1(1b); affected 6.2(27); affected 7.3(1)N1(1); affected 6.0(2)U6(7); affected 9.2(4); affected 7.1(4)N1(1a); affected 8.1(1); affected 7.1(3)N1(4); affected 7.0(3)IM3(2a); affected 6.0(2)A8(10); affected 7.1(3)N1(2); affected 8.2(2); affected 6.2(13); affected 6.0(2)A8(2); affected 7.0(3)IC4(4); affected 6.2(1); affected 8.3(2); affected 7.3(4)N1(1a); affected 6.0(2)A6(3); affected 6.0(2)U6(5b); affected 7.0(3)F3(3c); affected 7.0(3)F3(1); affected 6.0(2)U6(5); affected 7.0(3)F3(5); affected 7.1(2)N1(1); affected 7.1(3)N1(3); affected 6.0(2)A6(7); affected 7.0(3)I7(2); affected 6.2(5a); affected 6.0(2)A6(5); affected 7.0(3)IM3(2b); affected 7.1(3)N1(1); affected 6.0(2)U6(4a); affected 7.0(3)I5(3); affected 7.0(3)I7(3); affected 6.0(2)A8(6); affected 7.0(3)I6(2); affected 8.3(1); affected 6.2(3); affected 7.1(1)N1(1); affected 8.1(1b); affected 7.3(0)N1(1b); affected 6.0(2)A8(5); affected 7.1(4)N1(1d); affected 7.3(2)N1(1); affected 6.0(2)U6(8); affected 7.1(1)N1(1a); affected 7.0(3)IM3(3); affected 9.3(1); affected 6.0(2)U6(2); affected 6.2(9b); affected 7.1(3)N1(2a); affected 7.3(0)N1(1a); affected 6.0(2)A8(7); affected 7.0(3)I7(6); affected 8.4(1); affected 6.2(25); affected 6.0(2)U6(3a); affected 6.0(2)A8(11a); affected 6.2(11e); affected 7.1(3)N1(5); affected 7.0(3)I4(8z); affected 6.2(11); affected 7.0(3)I4(9); affected 6.2(19); affected 7.1(0)N1(1b); affected 7.0(3)I7(4); affected 7.0(3)I7(7); affected 6.2(5b); affected 7.3(0)DY(1); affected 6.0(2)A8(9); affected 6.0(2)A8(1); affected 7.1(5)N1(1); affected 6.2(15); affected 6.0(2)A6(6); affected 6.0(2)A8(10a); affected 7.0(3)I5(1); affected 9.3(1z); affected 9.2(2); affected 6.2(7); affected 6.2(9c); affected 7.0(3)F3(4); affected 7.3(3)N1(1); affected 7.0(3)I4(8b); affected 6.0(2)A8(3); affected 6.2(11b); affected 7.0(3)I4(6t); affected 7.0(3)I5(3a); affected 8.1(1a); affected 6.2(13a); affected 6.0(2)A8(8); affected 7.0(3)I7(5); affected 7.0(3)F3(3a); affected 7.1(0)N1(1a); affected 6.0(2)A8(4); affected 6.0(2)A6(3a); affected 6.0(2)A6(5a); affected 7.0(3)F2(1); affected 7.0(3)I4(8a); affected 6.0(2)U6(9); affected 7.0(3)F3(2); affected 6.0(2)U6(2a); affected 6.2(17); affected 7.0(3)I4(4); affected 6.2(23); affected 6.2(13b); affected 6.0(2)U6(3); affected 7.1(2)N1(1a); affected 7.0(3)I7(1); affected 6.2(21); affected 7.0(3)F2(2); affected 7.0(3)IA7(2); affected 7.0(3)IA7(1); affected 6.0(2)A8(7b); affected 6.2(11c); affected 7.0(3)F1(1); affected 6.0(2)A6(1a); affected 7.1(0)N1(1); affected 6.0(2)A6(2); affected 7.1(4)N1(1); affected 6.0(2)A8(4a); affected 6.0(2)U6(4); affected 8.4(1a); affected 9.3(3); affected 7.3(7)N1(1); affected 6.2(31); affected 7.0(3)I7(8); affected 6.0(2)U6(10a); affected 7.3(7)N1(1a); affected 9.3(4); affected 6.2(33); affected 9.3(5); affected 8.4(2a); affected 8.4(2b); affected 7.3(8)N1(1); affected 7.0(3)I7(9); affected 7.3(7)N1(1b); affected 8.5(1); affected 9.3(6); affected 10.1(2); affected 10.1(1); affected 8.4(2c); affected 9.3(5w); affected 7.3(9)N1(1); affected 9.3(7); affected 9.3(7k); affected 7.0(3)I7(9w); affected 10.2(1); affected 7.3(8)N1(1a); affected 9.3(7a); affected 9.3(8); affected 8.4(2d); affected 7.3(10)N1(1); affected 7.0(3)I7(10); affected 7.3(8)N1(1b); affected 10.2(1q); affected 10.2(2); affected 9.3(9); affected 10.1(2t); affected 7.3(11)N1(1); affected 10.2(3); affected 10.2(3t); affected 8.4(2e); affected 9.3(10); affected 7.3(11)N1(1a); affected 10.2(2a); affected 7.3(12)N1(1); affected 9.2(1a); affected 10.3(1); affected 10.2(4); affected 7.3(13)N1(1); affected 10.3(2); affected 9.3(11); affected 10.3(3); affected 10.2(5); affected 9.4(1); affected 9.3(2a); affected 8.4(2f); affected 9.3(12); affected 10.2(3v); affected 10.4(1); affected 10.3(99w); affected 7.3(14)N1(1); affected 10.2(6); affected 10.3(3w); affected 10.3(99x); affected 10.3(3o); affected 10.3(4); affected 10.3(3p); affected 10.3(4a); affected 9.4(1a); affected 10.4(2); affected 10.3(3q); affected 9.3(13); affected 10.3(5); affected 10.2(7); affected 10.4(3); affected 10.3(3x); affected 10.3(4g); affected 10.3(3r)

Vendor / product

Versions

Cisco / Cisco NX-OS Software

affected 7.3(6)N1(1a); affected 8.4(2); affected 7.3(6)N1(1); affected 9.2(3); affected 7.0(3)I5(2); affected 8.2(1); affected 6.0(2)A8(7a); affected 7.0(3)I4(5); affected 6.0(2)A6(1); affected 7.3(1)D1(1); affected 7.0(3)I4(6); affected 7.3(4)N1(1); affected 7.0(3)I4(3); affected 9.2(2v); affected 6.0(2)A6(5b); affected 7.3(0)D1(1); affected 6.2(17a); affected 7.0(3)I4(7); affected 6.0(2)U6(1a); affected 7.1(5)N1(1b); affected 7.0(3)I4(1); affected 7.0(3)I4(8); affected 7.0(3)I4(2); affected 7.1(4)N1(1c); affected 7.0(3)IM3(1); affected 6.0(2)U6(5a); affected 6.0(2)A8(11); affected 6.0(2)A6(4a); affected 6.2(9); affected 6.2(5); affected 9.2(1); affected 9.2(2t); affected 9.2(3y); affected 7.0(3)I4(1t); affected 6.0(2)U6(5c); affected 6.0(2)A6(4); affected 7.0(3)I7(6z); affected 9.3(2); affected 7.3(1)DY(1); affected 7.0(3)F3(3); affected 6.0(2)U6(6); affected 6.2(29); affected 7.0(3)I7(3z); affected 7.0(3)IM7(2); affected 6.0(2)A8(11b); affected 6.2(9a); affected 7.3(0)N1(1); affected 7.0(3)I7(5a); affected 6.2(11d); affected 7.0(3)I6(1); affected 6.0(2)U6(10); affected 7.0(3)IM3(2); affected 6.0(2)A6(8); affected 6.0(2)U6(1); affected 7.3(2)N1(1c); affected 7.0(3)I5(3b); affected 7.3(5)N1(1); affected 6.0(2)A6(2a); affected 7.3(2)N1(1b); affected 6.2(27); affected 7.3(1)N1(1); affected 6.0(2)U6(7); affected 9.2(4); affected 7.1(4)N1(1a); affected 8.1(1); affected 7.1(3)N1(4); affected 7.0(3)IM3(2a); affected 6.0(2)A8(10); affected 7.1(3)N1(2); affected 8.2(2); affected 6.2(13); affected 6.0(2)A8(2); affected 7.0(3)IC4(4); affected 6.2(1); affected 8.3(2); affected 7.3(4)N1(1a); affected 6.0(2)A6(3); affected 6.0(2)U6(5b); affected 7.0(3)F3(3c); affected 7.0(3)F3(1); affected 6.0(2)U6(5); affected 7.0(3)F3(5); affected 7.1(2)N1(1); affected 7.1(3)N1(3); affected 6.0(2)A6(7); affected 7.0(3)I7(2); affected 6.2(5a); affected 6.0(2)A6(5); affected 7.0(3)IM3(2b); affected 7.1(3)N1(1); affected 6.0(2)U6(4a); affected 7.0(3)I5(3); affected 7.0(3)I7(3); affected 6.0(2)A8(6); affected 7.0(3)I6(2); affected 8.3(1); affected 6.2(3); affected 7.1(1)N1(1); affected 8.1(1b); affected 7.3(0)N1(1b); affected 6.0(2)A8(5); affected 7.1(4)N1(1d); affected 7.3(2)N1(1); affected 6.0(2)U6(8); affected 7.1(1)N1(1a); affected 7.0(3)IM3(3); affected 9.3(1); affected 6.0(2)U6(2); affected 6.2(9b); affected 7.1(3)N1(2a); affected 7.3(0)N1(1a); affected 6.0(2)A8(7); affected 7.0(3)I7(6); affected 8.4(1); affected 6.2(25); affected 6.0(2)U6(3a); affected 6.0(2)A8(11a); affected 6.2(11e); affected 7.1(3)N1(5); affected 7.0(3)I4(8z); affected 6.2(11); affected 7.0(3)I4(9); affected 6.2(19); affected 7.1(0)N1(1b); affected 7.0(3)I7(4); affected 7.0(3)I7(7); affected 6.2(5b); affected 7.3(0)DY(1); affected 6.0(2)A8(9); affected 6.0(2)A8(1); affected 7.1(5)N1(1); affected 6.2(15); affected 6.0(2)A6(6); affected 6.0(2)A8(10a); affected 7.0(3)I5(1); affected 9.3(1z); affected 9.2(2); affected 6.2(7); affected 6.2(9c); affected 7.0(3)F3(4); affected 7.3(3)N1(1); affected 7.0(3)I4(8b); affected 6.0(2)A8(3); affected 6.2(11b); affected 7.0(3)I4(6t); affected 7.0(3)I5(3a); affected 8.1(1a); affected 6.2(13a); affected 6.0(2)A8(8); affected 7.0(3)I7(5); affected 7.0(3)F3(3a); affected 7.1(0)N1(1a); affected 6.0(2)A8(4); affected 6.0(2)A6(3a); affected 6.0(2)A6(5a); affected 7.0(3)F2(1); affected 7.0(3)I4(8a); affected 6.0(2)U6(9); affected 7.0(3)F3(2); affected 6.0(2)U6(2a); affected 6.2(17); affected 7.0(3)I4(4); affected 6.2(23); affected 6.2(13b); affected 6.0(2)U6(3); affected 7.1(2)N1(1a); affected 7.0(3)I7(1); affected 6.2(21); affected 7.0(3)F2(2); affected 7.0(3)IA7(2); affected 7.0(3)IA7(1); affected 6.0(2)A8(7b); affected 6.2(11c); affected 7.0(3)F1(1); affected 6.0(2)A6(1a); affected 7.1(0)N1(1); affected 6.0(2)A6(2); affected 7.1(4)N1(1); affected 6.0(2)A8(4a); affected 6.0(2)U6(4); affected 8.4(1a); affected 9.3(3); affected 7.3(7)N1(1); affected 6.2(31); affected 7.0(3)I7(8); affected 6.0(2)U6(10a); affected 7.3(7)N1(1a); affected 9.3(4); affected 6.2(33); affected 9.3(5); affected 8.4(2a); affected 8.4(2b); affected 7.3(8)N1(1); affected 7.0(3)I7(9); affected 7.3(7)N1(1b); affected 8.5(1); affected 9.3(6); affected 10.1(2); affected 10.1(1); affected 8.4(2c); affected 9.3(5w); affected 7.3(9)N1(1); affected 9.3(7); affected 9.3(7k); affected 7.0(3)I7(9w); affected 10.2(1); affected 7.3(8)N1(1a); affected 9.3(7a); affected 9.3(8); affected 8.4(2d); affected 7.3(10)N1(1); affected 7.0(3)I7(10); affected 7.3(8)N1(1b); affected 10.2(1q); affected 10.2(2); affected 9.3(9); affected 10.1(2t); affected 7.3(11)N1(1); affected 10.2(3); affected 10.2(3t); affected 8.4(2e); affected 9.3(10); affected 7.3(11)N1(1a); affected 10.2(2a); affected 7.3(12)N1(1); affected 9.2(1a); affected 10.3(1); affected 10.2(4); affected 7.3(13)N1(1); affected 10.3(2); affected 9.3(11); affected 10.3(3); affected 10.2(5); affected 9.4(1); affected 9.3(2a); affected 8.4(2f); affected 9.3(12); affected 10.2(3v); affected 10.4(1); affected 10.3(99w); affected 7.3(14)N1(1); affected 10.2(6); affected 10.3(3w); affected 10.3(99x); affected 10.3(3o); affected 10.3(4); affected 10.3(3p); affected 10.3(4a); affected 9.4(1a); affected 10.4(2); affected 10.3(3q); affected 9.3(13); affected 10.3(5); affected 10.2(7); affected 10.4(3); affected 10.3(3x); affected 10.3(4g); affected 10.3(3r)

CWE

CWE-653

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.