CVE-2024-20286

Cisco NX-OS Software Python Parser Escape Vulnerability

HIGH

8.8

CVSS Score

Published: August 28, 2024 at 04:37 PM UTC

Updated: June 17, 2026 at 07:06 AM UTC

227 products affected across 1 vendorNx OSNexus 9508Nexus 93120Tx

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

10.1(1)10.1(2)10.1(2t)10.2(1)10.2(1q)10.2(2)10.2(2a)10.2(3)10.2(3t)10.2(3v)10.2(4)10.2(5)10.2(6)10.2(7)10.3(1)10.3(2)10.3(3)10.3(3o)10.3(3p)10.3(3q)10.3(3r)10.3(3w)10.3(3x)10.3(4)10.3(4a)10.3(4g)10.3(99w)10.3(99x)10.4(1)10.4(2)6.0(2)A6(1)6.0(2)A6(1a)6.0(2)A6(2)6.0(2)A6(2a)6.0(2)A6(3)6.0(2)A6(3a)6.0(2)A6(4)6.0(2)A6(4a)6.0(2)A6(5)6.0(2)A6(5a)6.0(2)A6(5b)6.0(2)A6(6)6.0(2)A6(7)6.0(2)A6(8)6.0(2)A8(1)6.0(2)A8(10)6.0(2)A8(10a)6.0(2)A8(11)6.0(2)A8(11a)6.0(2)A8(11b)6.0(2)A8(2)6.0(2)A8(3)6.0(2)A8(4)6.0(2)A8(4a)6.0(2)A8(5)6.0(2)A8(6)6.0(2)A8(7)6.0(2)A8(7a)6.0(2)A8(7b)6.0(2)A8(8)6.0(2)A8(9)6.0(2)U6(1)6.0(2)U6(10)6.0(2)U6(10a)6.0(2)U6(1a)6.0(2)U6(2)6.0(2)U6(2a)6.0(2)U6(3)6.0(2)U6(3a)6.0(2)U6(4)6.0(2)U6(4a)6.0(2)U6(5)6.0(2)U6(5a)6.0(2)U6(5b)6.0(2)U6(5c)6.0(2)U6(6)6.0(2)U6(7)6.0(2)U6(8)6.0(2)U6(9)6.2(1)6.2(10)6.2(11)6.2(11b)6.2(11c)6.2(11d)6.2(11e)6.2(12)6.2(13)6.2(13a)6.2(13b)6.2(14)6.2(14a)6.2(14b)6.2(15)6.2(16)6.2(17)6.2(17a)6.2(18)6.2(19)6.2(2)6.2(20)6.2(20a)6.2(21)6.2(22)6.2(23)6.2(24)6.2(24a)6.2(25)6.2(26)6.2(27)6.2(29)6.2(2a)6.2(3)6.2(31)6.2(33)6.2(5)6.2(5a)6.2(5b)6.2(6)6.2(6a)6.2(6b)6.2(7)6.2(8)6.2(8a)6.2(8b)6.2(9)6.2(9a)6.2(9b)6.2(9c)7.0(3)F1(1)7.0(3)F2(1)7.0(3)F2(2)7.0(3)F3(1)7.0(3)F3(2)7.0(3)F3(3)7.0(3)F3(3a)7.0(3)F3(3c)7.0(3)F3(4)7.0(3)F3(5)7.0(3)I4(1)7.0(3)I4(1t)7.0(3)I4(2)7.0(3)I4(3)7.0(3)I4(4)7.0(3)I4(5)7.0(3)I4(6)7.0(3)I4(6t)7.0(3)I4(7)7.0(3)I4(8)7.0(3)I4(8a)7.0(3)I4(8b)7.0(3)I4(8z)7.0(3)I4(9)7.0(3)I5(1)7.0(3)I5(2)7.0(3)I5(3)7.0(3)I5(3a)7.0(3)I5(3b)7.0(3)I6(1)7.0(3)I6(2)7.0(3)I7(1)7.0(3)I7(10)7.0(3)I7(2)7.0(3)I7(3)7.0(3)I7(3z)7.0(3)I7(4)7.0(3)I7(5)7.0(3)I7(5a)7.0(3)I7(6)7.0(3)I7(6z)7.0(3)I7(7)7.0(3)I7(8)7.0(3)I7(9)7.0(3)I7(9w)7.0(3)IA7(1)7.0(3)IA7(2)7.0(3)IC4(4)7.0(3)IM3(1)7.0(3)IM3(2)7.0(3)IM3(2a)7.0(3)IM3(2b)7.0(3)IM3(3)7.0(3)IM7(2)7.2(0)D1(1)7.2(1)D1(1)7.2(2)D1(1)7.2(2)D1(2)7.2(2)D1(3)7.2(2)D1(4)7.3(0)D1(1)7.3(0)DX(1)7.3(0)DY(1)7.3(1)D1(1)7.3(1)DY(1)7.3(2)D1(1)7.3(2)D1(1d)7.3(2)D1(2)7.3(2)D1(3)7.3(2)D1(3a)7.3(3)D1(1)7.3(4)D1(1)7.3(5)D1(1)7.3(6)D1(1)7.3(7)D1(1)7.3(8)D1(1)7.3(9)D1(1)8.0(1)8.1(1)8.1(1a)8.1(1b)8.1(2)8.1(2a)8.2(1)8.2(10)8.2(2)8.2(3)8.2(4)8.2(5)8.2(6)8.2(7)8.2(7a)8.2(8)8.2(9)8.3(1)8.3(2)8.4(1)8.4(1a)8.4(2)8.4(2a)8.4(2b)8.4(2c)8.4(2d)8.4(2e)8.4(2f)8.4(3)8.4(4)8.4(4a)8.4(5)8.4(6)8.4(6a)8.4(7)8.4(8)8.4(9)8.5(1)9.2(1)9.2(1a)9.2(2)9.2(2t)9.2(2v)9.2(3)9.2(3y)9.2(4)9.3(1)9.3(10)9.3(11)9.3(12)9.3(13)9.3(1z)9.3(2)9.3(2a)9.3(3)9.3(4)9.3(5)9.3(5w)9.3(6)9.3(7)9.3(7a)9.3(7k)9.3(8)9.3(9)9.4(1)9.4(1a)

cisco-n9k-c92160yc-x (environment) · cisco-n9k-c92300yc (environment) · cisco-n9k-c92304qc (environment) · cisco-n9k-c9232c (environment) · cisco-n9k-c92348gc-x (environment) · cisco-n9k-c9236c (environment) · cisco-n9k-c9272q (environment) · cisco-n9k-c93108tc-ex (environment) · cisco-n9k-c93108tc-fx (environment) · cisco-n9k-c93120tx (environment) · cisco-n9k-c93128tx (environment) · cisco-n9k-c9316d-gx (environment) · cisco-n9k-c93180lc-ex (environment) · cisco-n9k-c93180yc-ex (environment) · cisco-n9k-c93180yc-fx (environment) · cisco-n9k-c93180yc2-fx (environment) · cisco-n9k-c93216tc-fx2 (environment) · cisco-n9k-c93240yc-fx2 (environment) · cisco-n9k-c9332c (environment) · cisco-n9k-c9332d-gx2b (environment) · cisco-n9k-c9332pq (environment) · cisco-n9k-c93360yc-fx2 (environment) · cisco-n9k-c9336c-fx2 (environment) · cisco-n9k-c9348d-gx2a (environment) · cisco-n9k-c9348gc-fxp (environment) · cisco-n9k-c93600cd-gx (environment) · cisco-n9k-c9364c (environment) · cisco-n9k-c9364c-gx (environment) · cisco-n9k-c9364d-gx2a (environment) · cisco-n9k-c9372px (environment) · cisco-n9k-c9372px-e (environment) · cisco-n9k-c9372tx (environment) · cisco-n9k-c9372tx-e (environment) · cisco-n9k-c9396px (environment) · cisco-n9k-c9396tx (environment) · cisco-n9k-c9504 (environment) · cisco-n9k-c9504-fm-r (environment) · cisco-n9k-c9508 (environment) · cisco-n9k-c9508-fm-r (environment) · cisco-n9k-c9516 (environment) · cisco-n9k-sc-a (environment) · cisco-n9k-sup-a (environment) · cisco-n9k-sup-b (environment) · cisco-n9k-x9400-16w (environment) · cisco-n9k-x9400-22l (environment) · cisco-n9k-x9400-8d (environment) · cisco-n9k-x9432c-s (environment) · cisco-n9k-x9464px (environment) · cisco-n9k-x9464tx2 (environment) · cisco-n9k-x9564px (environment) · cisco-n9k-x9564tx (environment) · cisco-n9k-x96136yc-r (environment) · cisco-n9k-x9636c-r (environment) · cisco-n9k-x9636c-rx (environment) · cisco-n9k-x9636q-r (environment) · cisco-n9k-x97160yc-ex (environment) · cisco-n9k-x97284yc-fx (environment) · cisco-n9k-x9732c-ex (environment) · cisco-n9k-x9732c-fx (environment) · cisco-n9k-x9736c-ex (environment) · cisco-n9k-x9736c-fx (environment) · cisco-n9k-x9788tc-fx (environment) · cisco-nexus-3000 (environment) · cisco-nexus-3000-series (environment) · cisco-nexus-3016 (environment) · cisco-nexus-3016q (environment) · cisco-nexus-3048 (environment) · cisco-nexus-3064 (environment) · cisco-nexus-3064-32t (environment) · cisco-nexus-3064-t (environment) · cisco-nexus-3064-x (environment) · cisco-nexus-3064t (environment) · cisco-nexus-3064x (environment) · cisco-nexus-3100 (environment) · cisco-nexus-3100-v (environment) · cisco-nexus-3100-z (environment) · cisco-nexus-3100v (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108pv-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-x (environment) · cisco-nexus-3132q-x-3132q-xl (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172 (environment) · cisco-nexus-3172pq (environment) · cisco-nexus-3172pq-pq-xl (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3172tq (environment) · cisco-nexus-3172tq-32t (environment) · cisco-nexus-3172tq-xl (environment) · cisco-nexus-3200 (environment) · cisco-nexus-3232 (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3400 (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-34200yc-sm (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3500 (environment) · cisco-nexus-3500-platform (environment) · cisco-nexus-3524 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-x-xl (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548 (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-x-xl (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-3600 (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-9000 (environment) · cisco-nexus-9000-in-aci-mode (environment) · cisco-nexus-9000-in-standalone (environment) · cisco-nexus-9000-in-standalone-nx-os-mode (environment) · cisco-nexus-9000v (environment) · cisco-nexus-9200 (environment) · cisco-nexus-9200yc (environment) · cisco-nexus-92160yc-switch (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-9221c (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92300yc-switch (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92304qc-switch (environment) · cisco-nexus-9232e (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9236c-switch (environment) · cisco-nexus-9272q (environment) · cisco-nexus-9272q-switch (environment) · cisco-nexus-9300 (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-ex-24 (environment) · cisco-nexus-93108tc-ex-switch (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93108tc-fx-24 (environment) · cisco-nexus-93108tc-fx3 (environment) · cisco-nexus-93108tc-fx3h (environment) · cisco-nexus-93108tc-fx3p (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93120tx-switch (environment) · cisco-nexus-93128 (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-93128tx-switch (environment) · cisco-nexus-9316d-gx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180lc-ex-switch (environment) · cisco-nexus-93180tc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-ex-24 (environment) · cisco-nexus-93180yc-ex-switch (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93180yc-fx-24 (environment) · cisco-nexus-93180yc-fx3 (environment) · cisco-nexus-93180yc-fx3h (environment) · cisco-nexus-93180yc-fx3s (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332d-gx2b (environment) · cisco-nexus-9332d-h2r (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-9332pq-switch (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336c-fx2-e (environment) · cisco-nexus-9336pq (environment) · cisco-nexus-9336pq-aci (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9336pq-aci-spine-switch (environment) · cisco-nexus-93400ld-h1 (environment) · cisco-nexus-9348d-gx2a (environment) · cisco-nexus-9348gc-fx3 (environment) · cisco-nexus-9348gc-fx3ph (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-93600cd-gx (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9364c-gx (environment) · cisco-nexus-9364c-h1 (environment) · cisco-nexus-9364d-gx2a (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372px-e-switch (environment) · cisco-nexus-9372px-switch (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9372tx-e-switch (environment) · cisco-nexus-9372tx-switch (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396px-switch (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9396tx-switch (environment) · cisco-nexus-9408 (environment) · cisco-nexus-9432pq (environment) · cisco-nexus-9500 (environment) · cisco-nexus-9500-16-slot (environment) · cisco-nexus-9500-4-slot (environment) · cisco-nexus-9500-8-slot (environment) · cisco-nexus-9500-supervisor-a (environment) · cisco-nexus-9500-supervisor-b (environment) · cisco-nexus-9500r (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9504-switch (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9508-switch (environment) · cisco-nexus-9516 (environment) · cisco-nexus-9516-switch (environment) · cisco-nexus-9536pq (environment) · cisco-nexus-9636pq (environment) · cisco-nexus-9716d-gx (environment) · cisco-nexus-9736pq (environment) · cisco-nexus-9800 (environment) · cisco-nexus-9800-34-port-100g-and-14-port-400g-line-card (environment) · cisco-nexus-9800-36-port-400g-line-card (environment) · cisco-nexus-9804 (environment) · cisco-nexus-9808 (environment)

N9K-C92160Yc-X · Ciscodevice

80%

All versions

N9K-C92300Yc · Ciscodevice

80%

All versions

N9K-C92304Qc · Ciscodevice

80%

All versions

N9K-C9232C · Ciscodevice

80%

All versions