CVEvulnerability
CVE-2014-3341
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.
Affected configurations
• cisco nx-os (<= 7.0\(3\)n1\(1\))
• cisco nx-os 5.0\(2\)n1\(1\)
• cisco nx-os 5.0\(2\)n2\(1\)
• cisco nx-os 5.0\(2\)n2\(1a\)
• cisco nx-os 5.0\(3\)n1\(1c\)
• cisco nx-os 5.0\(3\)n2\(1\)
• cisco nx-os 5.0\(3\)n2\(2\)
• cisco nx-os 5.0\(3\)n2\(2a\)
• cisco nx-os 5.0\(3\)n2\(2b\)
• cisco nx-os 5.1\(3\)n1\(1\)
• cisco nx-os 5.1\(3\)n1\(1a\)
• cisco nx-os 5.1\(3\)n2\(1\)
• cisco nx-os 5.1\(3\)n2\(1a\)
• cisco nx-os 5.1\(3\)n2\(1b\)
• cisco nx-os 5.1\(3\)n2\(1c\)
• cisco nx-os 5.2\(1\)n1\(1\)
• cisco nx-os 5.2\(1\)n1\(1a\)
• cisco nx-os 5.2\(1\)n1\(1b\)
• cisco nx-os 5.2\(1\)n1\(2\)
• cisco nx-os 5.2\(1\)n1\(2a\)
• cisco nx-os 5.2\(1\)n1\(3\)
• cisco nx-os 5.2\(1\)n1\(4\)
• cisco nx-os 5.2\(1\)n1\(5\)
• cisco nx-os 5.2\(1\)n1\(6\)
• cisco nx-os 5.2\(1\)n1\(7\)
• cisco nx-os 5.2\(1\)n1\(8\)
• cisco nx-os 5.2\(1\)n1\(8a\)
• cisco nx-os 6.0\(2\)n1\(2\)
• cisco nx-os 6.0\(2\)n1\(2a\)
• cisco nx-os 6.0\(2\)n2\(1\)
• cisco nx-os 6.0\(2\)n2\(1b\)
• cisco nx-os 6.0\(2\)n2\(2\)
• cisco nx-os 6.0\(2\)n2\(3\)
• cisco nx-os 6.0\(2\)n2\(4\)
• cisco nx-os 6.0\(2\)n2\(5\)
• cisco nx-os 7.0\(0\)n1\(1\)
• cisco nx-os 7.0\(1\)n1\(1\)
• cisco nx-os 7.0\(2\)n1\(1\)
• cisco nexus 5000
• cisco nexus 5010
• cisco nexus 5010p switch
• cisco nexus 5020
• cisco nexus 5020p switch
• cisco nexus 5548p
• cisco nexus 5548up
• cisco nexus 5596t
• cisco nexus 5596up
• cisco nexus 56128p
• cisco nexus 5672up
• cisco nexus 6001
• cisco nexus 6004
• cisco nexus 6004x
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35338 Vendor Advisory
- http://www.securityfocus.com/bid/69266 www.securityfocus.com
- http://www.securitytracker.com/id/1030746 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95329 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35338 Vendor Advisory
- http://www.securityfocus.com/bid/69266 www.securityfocus.com
- http://www.securitytracker.com/id/1030746 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95329 exchange.xforce.ibmcloud.com