VULNERABILITY INTELLIGENCE

CVE-2024-20285

CVSS score8.8 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2024-08-28

Last modified2026-06-17

Description

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of user-su…