CVE-2019-1727

CVE-2019-1727 is a privilege escalation vulnerability in the Python scripting subsystem of Cisco NX-OS Software. An authenticated, local attacker with administrative or Python execution privileges can exploit insufficient sanitization of user-supplied parameters to escape the Python sandbox and execute arbitrary commands, elevating their privilege level. This vulnerability has a CVSS score of 6.7 (Medium) due to its local attack vector and high impact on confidentiality, integrity, and availability, though it requires high privileges to exploit. There is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage, suggesting a low current threat.