topic Re: DNAC 2.2.3.4 and Python version in Cisco Catalyst Center

DNAC 2.2.3.4 and Python version

roberto.tyf — Tue, 08 Mar 2022 18:16:05 GMT

The Python that is installed, is on version Python 2.7.17, which is end of life and not supported anymore, so it flags in vulnerability scans, like NESSUS scan as "Python Unsupported Version Detection". Is there any plans for the DNAc to use a supported or latest version of Python?

Re: DNAC 2.2.3.4 and Python version

Flavio Miranda — Wed, 09 Mar 2022 02:51:45 GMT

Well, you may see that there´s the command pip in your DNAC cli. which means, you can upgrade your Python from that. However, you DNAC must have internet access.

In the same way, the vulnerabilities you mentioned, will be exploited only if your server is wide open on the internet.

Re: DNAC 2.2.3.4 and Python version

Dan Rowe — Wed, 09 Mar 2022 22:05:52 GMT

2.2.3.4 has both Python 2.7.17 and 3.6.9

$ python --version

Python 2.7.17

$ python3 --version

Python 3.6.9

Re: DNAC 2.2.3.4 and Python version

Parthiv Shah — Thu, 10 Mar 2022 01:08:14 GMT

Never install PIP or any other software from community or outside. If you do that then you have an excellent recipe for your Cisco DNAC upgrade to fail or unexpected behavior.

If you have to report any vulnerabilities, open Service request with TAC or ask question here but DO NOT modify things on your own.

Re: DNAC 2.2.3.4 and Python version

roberto.tyf — Thu, 10 Mar 2022 13:44:26 GMT

report this issue with TAC, and they openned a defect:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa64085

No workaround for the moment.

Re: DNAC 2.2.3.4 and Python version

robertg1234 — Wed, 18 May 2022 20:35:23 GMT

Pending fix, I need to block/disable the port. How do I do that? Thanks!