CVEvulnerability

CVE-2014-3341

5.0 MEDIUM Published 2014-08-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.

Affected configurations

• cisco nx-os (<= 7.0\(3\)n1\(1\)) • cisco nx-os 5.0\(2\)n1\(1\) • cisco nx-os 5.0\(2\)n2\(1\) • cisco nx-os 5.0\(2\)n2\(1a\) • cisco nx-os 5.0\(3\)n1\(1c\) • cisco nx-os 5.0\(3\)n2\(1\) • cisco nx-os 5.0\(3\)n2\(2\) • cisco nx-os 5.0\(3\)n2\(2a\) • cisco nx-os 5.0\(3\)n2\(2b\) • cisco nx-os 5.1\(3\)n1\(1\) • cisco nx-os 5.1\(3\)n1\(1a\) • cisco nx-os 5.1\(3\)n2\(1\) • cisco nx-os 5.1\(3\)n2\(1a\) • cisco nx-os 5.1\(3\)n2\(1b\) • cisco nx-os 5.1\(3\)n2\(1c\) • cisco nx-os 5.2\(1\)n1\(1\) • cisco nx-os 5.2\(1\)n1\(1a\) • cisco nx-os 5.2\(1\)n1\(1b\) • cisco nx-os 5.2\(1\)n1\(2\) • cisco nx-os 5.2\(1\)n1\(2a\) • cisco nx-os 5.2\(1\)n1\(3\) • cisco nx-os 5.2\(1\)n1\(4\) • cisco nx-os 5.2\(1\)n1\(5\) • cisco nx-os 5.2\(1\)n1\(6\) • cisco nx-os 5.2\(1\)n1\(7\) • cisco nx-os 5.2\(1\)n1\(8\) • cisco nx-os 5.2\(1\)n1\(8a\) • cisco nx-os 6.0\(2\)n1\(2\) • cisco nx-os 6.0\(2\)n1\(2a\) • cisco nx-os 6.0\(2\)n2\(1\) • cisco nx-os 6.0\(2\)n2\(1b\) • cisco nx-os 6.0\(2\)n2\(2\) • cisco nx-os 6.0\(2\)n2\(3\) • cisco nx-os 6.0\(2\)n2\(4\) • cisco nx-os 6.0\(2\)n2\(5\) • cisco nx-os 7.0\(0\)n1\(1\) • cisco nx-os 7.0\(1\)n1\(1\) • cisco nx-os 7.0\(2\)n1\(1\) • cisco nexus 5000 • cisco nexus 5010 • cisco nexus 5010p switch • cisco nexus 5020 • cisco nexus 5020p switch • cisco nexus 5548p • cisco nexus 5548up • cisco nexus 5596t • cisco nexus 5596up • cisco nexus 56128p • cisco nexus 5672up • cisco nexus 6001 • cisco nexus 6004 • cisco nexus 6004x

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References