自己報告されたバージョンによると、Cisco NX-OS ソフトウェアは複数の脆弱性の影響を受けます。詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください。

According to its self-reported version, the Cisco NX-OS Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information.

根據其自我報告的版本，Cisco NX-OS 軟體受到一個或多個弱點影響。如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告。

根据其自我报告的版本，Cisco NX-OS 软件受到一个或多个漏洞的影响。若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告。

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient sanitization of user-supplied parameters that are passed to certain Python functions within the scripting sandbox of the affected device.
An attacker could exploit this vulnerability to escape the scripting sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. To exploit this vulnerability, an attacker must have local access and be authenticated to the targeted device with administrative or Python execution privileges. These requirements could limit the possibility of a successful exploit. This vulnerability affects the following Cisco products if they are running Cisco NX-OS Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs:
CSCvb86832, CSCvd86474, CSCvd86479, CSCvd86484, CSCvd86490, CSCve97102, CSCvf12757, CSCvf12804, CSCvf12815, CSCvf15198.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
104127	Cisco NX-OSソフトウェアのPythonパーサーエスケープの脆弱性	Nessus	CISCO	2017/10/24	2019/12/20	medium
104127	Cisco NX-OS Software Python Parser Escape Vulnerability	Nessus	CISCO	2017/10/24	2019/12/20	medium
104127	Cisco NX-OS 軟體 Python 剖析器逸出弱點	Nessus	CISCO	2017/10/24	2019/12/20	medium
104127	Cisco NX-OS 软件 Python 解析器逃离漏洞	Nessus	CISCO	2017/10/24	2019/12/20	medium
501390	Cisco NX-OS Software Python Parser Escape (CVE-2017-12301)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	medium

检测

插件搜索

medium

medium

medium

medium

medium