CVE-2024-20286 — Cisco NX-OS Software Python Parser Escape Vulnerability

Back Back to CVE browser

HIGH

Cisco NX-OS Software Python Parser Escape Vulnerability

Published Aug 28, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.19%

Description

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user.  Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.

Affected products

Vendor Cisco Product Cisco NX-OS Software Default
n/a
- Version
  10.1(1)
  Status
  affected
  Constraints
  -
- Version
  10.1(2)
  Status
  affected
  Constraints
  -
- Version
  10.1(2t)
  Status
  affected
  Constraints
  -
- Version
  10.2(1)
  Status
  affected
  Constraints
  -
- Version
  10.2(1q)
  Status
  affected
  Constraints
  -
- Version
  10.2(2)
  Status
  affected
  Constraints
  -
- Version
  10.2(2a)
  Status
  affected
  Constraints
  -
- Version
  10.2(3)
  Status
  affected
  Constraints
  -
- Version
  10.2(3t)
  Status
  affected
  Constraints
  -
- Version
  10.2(3v)
  Status
  affected
  Constraints
  -
- Version
  10.2(4)
  Status
  affected
  Constraints
  -
- Version
  10.2(5)
  Status
  affected
  Constraints
  -
- Version
  10.2(6)
  Status
  affected
  Constraints
  -
- Version
  10.2(7)
  Status
  affected
  Constraints
  -
- Version
  10.3(1)
  Status
  affected
  Constraints
  -
- Version
  10.3(2)
  Status
  affected
  Constraints
  -
- Version
  10.3(3)
  Status
  affected
  Constraints
  -
- Version
  10.3(3o)
  Status
  affected
  Constraints
  -
- Version
  10.3(3p)
  Status
  affected
  Constraints
  -
- Version
  10.3(3q)
  Status
  affected
  Constraints
  -
- Version
  10.3(3r)
  Status
  affected
  Constraints
  -
- Version
  10.3(3w)
  Status
  affected
  Constraints
  -
- Version
  10.3(3x)
  Status
  affected
  Constraints
  -
- Version
  10.3(4)
  Status
  affected
  Constraints
  -
- Version
  10.3(4a)
  Status
  affected
  Constraints
  -
- Version
  10.3(4g)
  Status
  affected
  Constraints
  -
- Version
  10.3(99w)
  Status
  affected
  Constraints
  -
- Version
  10.3(99x)
  Status
  affected
  Constraints
  -
- Version
  10.4(1)
  Status
  affected
  Constraints
  -
- Version
  10.4(2)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(1)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(1a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(2)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(2a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(3)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(3a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(4)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(4a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(5)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(5a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(5b)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(6)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(7)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A6(8)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(1)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(10)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(10a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(11)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(11a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(11b)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(2)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(3)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(4)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(4a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(5)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(6)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(7)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(7a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(7b)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(8)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(9)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(1)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(10)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(10a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(1a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(2)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(2a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(3)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(3a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(4)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(4a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(5)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(5a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(5b)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(5c)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(6)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(7)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(8)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)U6(9)
  Status
  affected
  Constraints
  -
- Version
  6.2(1)
  Status
  affected
  Constraints
  -
- Version
  6.2(10)
  Status
  affected
  Constraints
  -
- Version
  6.2(11)
  Status
  affected
  Constraints
  -
- Version
  6.2(11b)
  Status
  affected
  Constraints
  -
- Version
  6.2(11c)
  Status
  affected
  Constraints
  -
- Version
  6.2(11d)
  Status
  affected
  Constraints
  -
- Version
  6.2(11e)
  Status
  affected
  Constraints
  -
- Version
  6.2(12)
  Status
  affected
  Constraints
  -
- Version
  6.2(13)
  Status
  affected
  Constraints
  -
- Version
  6.2(13a)
  Status
  affected
  Constraints
  -
- Version
  6.2(13b)
  Status
  affected
  Constraints
  -
- Version
  6.2(14)
  Status
  affected
  Constraints
  -
- Version
  6.2(14a)
  Status
  affected
  Constraints
  -
- Version
  6.2(14b)
  Status
  affected
  Constraints
  -
- Version
  6.2(15)
  Status
  affected
  Constraints
  -
- Version
  6.2(16)
  Status
  affected
  Constraints
  -
- Version
  6.2(17)
  Status
  affected
  Constraints
  -
- Version
  6.2(17a)
  Status
  affected
  Constraints
  -
- Version
  6.2(18)
  Status
  affected
  Constraints
  -
- Version
  6.2(19)
  Status
  affected
  Constraints
  -
- Version
  6.2(2)
  Status
  affected
  Constraints
  -
- Version
  6.2(20)
  Status
  affected
  Constraints
  -
- Version
  6.2(20a)
  Status
  affected
  Constraints
  -
- Version
  6.2(21)
  Status
  affected
  Constraints
  -
- Version
  6.2(22)
  Status
  affected
  Constraints
  -
- Version
  6.2(23)
  Status
  affected
  Constraints
  -
- Version
  6.2(24)
  Status
  affected
  Constraints
  -
- Version
  6.2(24a)
  Status
  affected
  Constraints
  -
- Version
  6.2(25)
  Status
  affected
  Constraints
  -
- Version
  6.2(26)
  Status
  affected
  Constraints
  -
- Version
  6.2(27)
  Status
  affected
  Constraints
  -
- Version
  6.2(29)
  Status
  affected
  Constraints
  -
- Version
  6.2(2a)
  Status
  affected
  Constraints
  -
- Version
  6.2(3)
  Status
  affected
  Constraints
  -
- Version
  6.2(31)
  Status
  affected
  Constraints
  -
- Version
  6.2(33)
  Status
  affected
  Constraints
  -
- Version
  6.2(5)
  Status
  affected
  Constraints
  -
- Version
  6.2(5a)
  Status
  affected
  Constraints
  -
- Version
  6.2(5b)
  Status
  affected
  Constraints
  -
- Version
  6.2(6)
  Status
  affected
  Constraints
  -
- Version
  6.2(6a)
  Status
  affected
  Constraints
  -
- Version
  6.2(6b)
  Status
  affected
  Constraints
  -
- Version
  6.2(7)
  Status
  affected
  Constraints
  -
- Version
  6.2(8)
  Status
  affected
  Constraints
  -
- Version
  6.2(8a)
  Status
  affected
  Constraints
  -
- Version
  6.2(8b)
  Status
  affected
  Constraints
  -
- Version
  6.2(9)
  Status
  affected
  Constraints
  -
- Version
  6.2(9a)
  Status
  affected
  Constraints
  -
- Version
  6.2(9b)
  Status
  affected
  Constraints
  -
- Version
  6.2(9c)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F1(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F2(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F2(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(3a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(3c)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(5)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(1t)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(5)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(6)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(6t)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(7)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8b)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8z)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(9)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(3a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(3b)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I6(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I6(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(10)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(3z)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(5)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(5a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(6)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(6z)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(7)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(8)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(9)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(9w)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IA7(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IA7(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IC4(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM3(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM3(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM3(2a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM3(2b)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM3(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM7(2)
  Status
  affected
  Constraints
  -
- Version
  7.2(0)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.2(1)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.2(2)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.2(2)D1(2)
  Status
  affected
  Constraints
  -
- Version
  7.2(2)D1(3)
  Status
  affected
  Constraints
  -
- Version
  7.2(2)D1(4)
  Status
  affected
  Constraints
  -
- Version
  7.3(0)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(0)DX(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(0)DY(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(1)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(1)DY(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(1d)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(2)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(3)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(3a)
  Status
  affected
  Constraints
  -
- Version
  7.3(3)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(4)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(5)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(6)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(7)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(8)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(9)D1(1)
  Status
  affected
  Constraints
  -
- Version
  8.0(1)
  Status
  affected
  Constraints
  -
- Version
  8.1(1)
  Status
  affected
  Constraints
  -
- Version
  8.1(1a)
  Status
  affected
  Constraints
  -
- Version
  8.1(1b)
  Status
  affected
  Constraints
  -
- Version
  8.1(2)
  Status
  affected
  Constraints
  -
- Version
  8.1(2a)
  Status
  affected
  Constraints
  -
- Version
  8.2(1)
  Status
  affected
  Constraints
  -
- Version
  8.2(10)
  Status
  affected
  Constraints
  -
- Version
  8.2(2)
  Status
  affected
  Constraints
  -
- Version
  8.2(3)
  Status
  affected
  Constraints
  -
- Version
  8.2(4)
  Status
  affected
  Constraints
  -
- Version
  8.2(5)
  Status
  affected
  Constraints
  -
- Version
  8.2(6)
  Status
  affected
  Constraints
  -
- Version
  8.2(7)
  Status
  affected
  Constraints
  -
- Version
  8.2(7a)
  Status
  affected
  Constraints
  -
- Version
  8.2(8)
  Status
  affected
  Constraints
  -
- Version
  8.2(9)
  Status
  affected
  Constraints
  -
- Version
  8.3(1)
  Status
  affected
  Constraints
  -
- Version
  8.3(2)
  Status
  affected
  Constraints
  -
- Version
  8.4(1)
  Status
  affected
  Constraints
  -
- Version
  8.4(1a)
  Status
  affected
  Constraints
  -
- Version
  8.4(2)
  Status
  affected
  Constraints
  -
- Version
  8.4(2a)
  Status
  affected
  Constraints
  -
- Version
  8.4(2b)
  Status
  affected
  Constraints
  -
- Version
  8.4(2c)
  Status
  affected
  Constraints
  -
- Version
  8.4(2d)
  Status
  affected
  Constraints
  -
- Version
  8.4(2e)
  Status
  affected
  Constraints
  -
- Version
  8.4(2f)
  Status
  affected
  Constraints
  -
- Version
  8.4(3)
  Status
  affected
  Constraints
  -
- Version
  8.4(4)
  Status
  affected
  Constraints
  -
- Version
  8.4(4a)
  Status
  affected
  Constraints
  -
- Version
  8.4(5)
  Status
  affected
  Constraints
  -
- Version
  8.4(6)
  Status
  affected
  Constraints
  -
- Version
  8.4(6a)
  Status
  affected
  Constraints
  -
- Version
  8.4(7)
  Status
  affected
  Constraints
  -
- Version
  8.4(8)
  Status
  affected
  Constraints
  -
- Version
  8.4(9)
  Status
  affected
  Constraints
  -
- Version
  8.5(1)
  Status
  affected
  Constraints
  -
- Version
  9.2(1)
  Status
  affected
  Constraints
  -
- Version
  9.2(1a)
  Status
  affected
  Constraints
  -
- Version
  9.2(2)
  Status
  affected
  Constraints
  -
- Version
  9.2(2t)
  Status
  affected
  Constraints
  -
- Version
  9.2(2v)
  Status
  affected
  Constraints
  -
- Version
  9.2(3)
  Status
  affected
  Constraints
  -
- Version
  9.2(3y)
  Status
  affected
  Constraints
  -
- Version
  9.2(4)
  Status
  affected
  Constraints
  -
- Version
  9.3(1)
  Status
  affected
  Constraints
  -
- Version
  9.3(10)
  Status
  affected
  Constraints
  -
- Version
  9.3(11)
  Status
  affected
  Constraints
  -
- Version
  9.3(12)
  Status
  affected
  Constraints
  -
- Version
  9.3(13)
  Status
  affected
  Constraints
  -
- Version
  9.3(1z)
  Status
  affected
  Constraints
  -
- Version
  9.3(2)
  Status
  affected
  Constraints
  -
- Version
  9.3(2a)
  Status
  affected
  Constraints
  -
- Version
  9.3(3)
  Status
  affected
  Constraints
  -
- Version
  9.3(4)
  Status
  affected
  Constraints
  -
- Version
  9.3(5)
  Status
  affected
  Constraints
  -
- Version
  9.3(5w)
  Status
  affected
  Constraints
  -
- Version
  9.3(6)
  Status
  affected
  Constraints
  -
- Version
  9.3(7)
  Status
  affected
  Constraints
  -
- Version
  9.3(7a)
  Status
  affected
  Constraints
  -
- Version
  9.3(7k)
  Status
  affected
  Constraints
  -
- Version
  9.3(8)
  Status
  affected
  Constraints
  -
- Version
  9.3(9)
  Status
  affected
  Constraints
  -
- Version
  9.4(1)
  Status
  affected
  Constraints
  -
- Version
  9.4(1a)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco NX-OS Software

n/a

Version	Status	Constraints
10.1(1)	affected	-
10.1(2)	affected	-
10.1(2t)	affected	-
10.2(1)	affected	-
10.2(1q)	affected	-
10.2(2)	affected	-
10.2(2a)	affected	-
10.2(3)	affected	-
10.2(3t)	affected	-
10.2(3v)	affected	-
10.2(4)	affected	-
10.2(5)	affected	-
10.2(6)	affected	-
10.2(7)	affected	-
10.3(1)	affected	-
10.3(2)	affected	-
10.3(3)	affected	-
10.3(3o)	affected	-
10.3(3p)	affected	-
10.3(3q)	affected	-
10.3(3r)	affected	-
10.3(3w)	affected	-
10.3(3x)	affected	-
10.3(4)	affected	-
10.3(4a)	affected	-
10.3(4g)	affected	-
10.3(99w)	affected	-
10.3(99x)	affected	-
10.4(1)	affected	-
10.4(2)	affected	-
6.0(2)A6(1)	affected	-
6.0(2)A6(1a)	affected	-
6.0(2)A6(2)	affected	-
6.0(2)A6(2a)	affected	-
6.0(2)A6(3)	affected	-
6.0(2)A6(3a)	affected	-
6.0(2)A6(4)	affected	-
6.0(2)A6(4a)	affected	-
6.0(2)A6(5)	affected	-
6.0(2)A6(5a)	affected	-
6.0(2)A6(5b)	affected	-
6.0(2)A6(6)	affected	-
6.0(2)A6(7)	affected	-
6.0(2)A6(8)	affected	-
6.0(2)A8(1)	affected	-
6.0(2)A8(10)	affected	-
6.0(2)A8(10a)	affected	-
6.0(2)A8(11)	affected	-
6.0(2)A8(11a)	affected	-
6.0(2)A8(11b)	affected	-
6.0(2)A8(2)	affected	-
6.0(2)A8(3)	affected	-
6.0(2)A8(4)	affected	-
6.0(2)A8(4a)	affected	-
6.0(2)A8(5)	affected	-
6.0(2)A8(6)	affected	-
6.0(2)A8(7)	affected	-
6.0(2)A8(7a)	affected	-
6.0(2)A8(7b)	affected	-
6.0(2)A8(8)	affected	-
6.0(2)A8(9)	affected	-
6.0(2)U6(1)	affected	-
6.0(2)U6(10)	affected	-
6.0(2)U6(10a)	affected	-
6.0(2)U6(1a)	affected	-
6.0(2)U6(2)	affected	-
6.0(2)U6(2a)	affected	-
6.0(2)U6(3)	affected	-
6.0(2)U6(3a)	affected	-
6.0(2)U6(4)	affected	-
6.0(2)U6(4a)	affected	-
6.0(2)U6(5)	affected	-
6.0(2)U6(5a)	affected	-
6.0(2)U6(5b)	affected	-
6.0(2)U6(5c)	affected	-
6.0(2)U6(6)	affected	-
6.0(2)U6(7)	affected	-
6.0(2)U6(8)	affected	-
6.0(2)U6(9)	affected	-
6.2(1)	affected	-
6.2(10)	affected	-
6.2(11)	affected	-
6.2(11b)	affected	-
6.2(11c)	affected	-
6.2(11d)	affected	-
6.2(11e)	affected	-
6.2(12)	affected	-
6.2(13)	affected	-
6.2(13a)	affected	-
6.2(13b)	affected	-
6.2(14)	affected	-
6.2(14a)	affected	-
6.2(14b)	affected	-
6.2(15)	affected	-
6.2(16)	affected	-
6.2(17)	affected	-
6.2(17a)	affected	-
6.2(18)	affected	-
6.2(19)	affected	-
6.2(2)	affected	-
6.2(20)	affected	-
6.2(20a)	affected	-
6.2(21)	affected	-
6.2(22)	affected	-
6.2(23)	affected	-
6.2(24)	affected	-
6.2(24a)	affected	-
6.2(25)	affected	-
6.2(26)	affected	-
6.2(27)	affected	-
6.2(29)	affected	-
6.2(2a)	affected	-
6.2(3)	affected	-
6.2(31)	affected	-
6.2(33)	affected	-
6.2(5)	affected	-
6.2(5a)	affected	-
6.2(5b)	affected	-
6.2(6)	affected	-
6.2(6a)	affected	-
6.2(6b)	affected	-
6.2(7)	affected	-
6.2(8)	affected	-
6.2(8a)	affected	-
6.2(8b)	affected	-
6.2(9)	affected	-
6.2(9a)	affected	-
6.2(9b)	affected	-
6.2(9c)	affected	-
7.0(3)F1(1)	affected	-
7.0(3)F2(1)	affected	-
7.0(3)F2(2)	affected	-
7.0(3)F3(1)	affected	-
7.0(3)F3(2)	affected	-
7.0(3)F3(3)	affected	-
7.0(3)F3(3a)	affected	-
7.0(3)F3(3c)	affected	-
7.0(3)F3(4)	affected	-
7.0(3)F3(5)	affected	-
7.0(3)I4(1)	affected	-
7.0(3)I4(1t)	affected	-
7.0(3)I4(2)	affected	-
7.0(3)I4(3)	affected	-
7.0(3)I4(4)	affected	-
7.0(3)I4(5)	affected	-
7.0(3)I4(6)	affected	-
7.0(3)I4(6t)	affected	-
7.0(3)I4(7)	affected	-
7.0(3)I4(8)	affected	-
7.0(3)I4(8a)	affected	-
7.0(3)I4(8b)	affected	-
7.0(3)I4(8z)	affected	-
7.0(3)I4(9)	affected	-
7.0(3)I5(1)	affected	-
7.0(3)I5(2)	affected	-
7.0(3)I5(3)	affected	-
7.0(3)I5(3a)	affected	-
7.0(3)I5(3b)	affected	-
7.0(3)I6(1)	affected	-
7.0(3)I6(2)	affected	-
7.0(3)I7(1)	affected	-
7.0(3)I7(10)	affected	-
7.0(3)I7(2)	affected	-
7.0(3)I7(3)	affected	-
7.0(3)I7(3z)	affected	-
7.0(3)I7(4)	affected	-
7.0(3)I7(5)	affected	-
7.0(3)I7(5a)	affected	-
7.0(3)I7(6)	affected	-
7.0(3)I7(6z)	affected	-
7.0(3)I7(7)	affected	-
7.0(3)I7(8)	affected	-
7.0(3)I7(9)	affected	-
7.0(3)I7(9w)	affected	-
7.0(3)IA7(1)	affected	-
7.0(3)IA7(2)	affected	-
7.0(3)IC4(4)	affected	-
7.0(3)IM3(1)	affected	-
7.0(3)IM3(2)	affected	-
7.0(3)IM3(2a)	affected	-
7.0(3)IM3(2b)	affected	-
7.0(3)IM3(3)	affected	-
7.0(3)IM7(2)	affected	-
7.2(0)D1(1)	affected	-
7.2(1)D1(1)	affected	-
7.2(2)D1(1)	affected	-
7.2(2)D1(2)	affected	-
7.2(2)D1(3)	affected	-
7.2(2)D1(4)	affected	-
7.3(0)D1(1)	affected	-
7.3(0)DX(1)	affected	-
7.3(0)DY(1)	affected	-
7.3(1)D1(1)	affected	-
7.3(1)DY(1)	affected	-
7.3(2)D1(1)	affected	-
7.3(2)D1(1d)	affected	-
7.3(2)D1(2)	affected	-
7.3(2)D1(3)	affected	-
7.3(2)D1(3a)	affected	-
7.3(3)D1(1)	affected	-
7.3(4)D1(1)	affected	-
7.3(5)D1(1)	affected	-
7.3(6)D1(1)	affected	-
7.3(7)D1(1)	affected	-
7.3(8)D1(1)	affected	-
7.3(9)D1(1)	affected	-
8.0(1)	affected	-
8.1(1)	affected	-
8.1(1a)	affected	-
8.1(1b)	affected	-
8.1(2)	affected	-
8.1(2a)	affected	-
8.2(1)	affected	-
8.2(10)	affected	-
8.2(2)	affected	-
8.2(3)	affected	-
8.2(4)	affected	-
8.2(5)	affected	-
8.2(6)	affected	-
8.2(7)	affected	-
8.2(7a)	affected	-
8.2(8)	affected	-
8.2(9)	affected	-
8.3(1)	affected	-
8.3(2)	affected	-
8.4(1)	affected	-
8.4(1a)	affected	-
8.4(2)	affected	-
8.4(2a)	affected	-
8.4(2b)	affected	-
8.4(2c)	affected	-
8.4(2d)	affected	-
8.4(2e)	affected	-
8.4(2f)	affected	-
8.4(3)	affected	-
8.4(4)	affected	-
8.4(4a)	affected	-
8.4(5)	affected	-
8.4(6)	affected	-
8.4(6a)	affected	-
8.4(7)	affected	-
8.4(8)	affected	-
8.4(9)	affected	-
8.5(1)	affected	-
9.2(1)	affected	-
9.2(1a)	affected	-
9.2(2)	affected	-
9.2(2t)	affected	-
9.2(2v)	affected	-
9.2(3)	affected	-
9.2(3y)	affected	-
9.2(4)	affected	-
9.3(1)	affected	-
9.3(10)	affected	-
9.3(11)	affected	-
9.3(12)	affected	-
9.3(13)	affected	-
9.3(1z)	affected	-
9.3(2)	affected	-
9.3(2a)	affected	-
9.3(3)	affected	-
9.3(4)	affected	-
9.3(5)	affected	-
9.3(5w)	affected	-
9.3(6)	affected	-
9.3(7)	affected	-
9.3(7a)	affected	-
9.3(7k)	affected	-
9.3(8)	affected	-
9.3(9)	affected	-
9.4(1)	affected	-
9.4(1a)	affected	-

Remediation

No remediation recorded yet.

Metrics

0.19% 0.00194

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00194

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.19% (0.00194)	8.20th	v5 (v2026.06.15)
Jun 15, 2026	0.19% (0.00194)	9.22th	v5 (v2026.06.15)
Mar 17, 2025	0.03% (0.00031)	5.63th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Aug 29, 2024	0.04% (0.00043)	9.56th	v3 (v2023.03.01)

Weaknesses (1)

CWE-693

References (2)

Link	Providers	Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-psbe-ce-YvbTn5du		Vendor Advisory
https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/105x/programmability/cisco-nexus-9000-series-nx-os-programmability-guide-105x/m-n9k-python-api-101x.html?bookSearch=true#concept_A2CFF094ADCB414C983EA06AD8E9A410		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Aug 28, 2024

Updated Aug 28, 2024

Reserved Nov 8, 2023

Link CVE-2024-20286

CISA Vulnrichment

Updated Aug 28, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-20286

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-20286