Unscored severity · published Aug 19, 2014
CVE-2014-3341
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID…
–
CVSS
4.7%
EPSS
No
On KEV
Description
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N5
Nexus 5000 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5010 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5010p Switch · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5020 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5020p Switch · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5548p · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5548up · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5596t · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5596up · Cisco
All versions, or not specified · source: NVD
N5
Nexus 56128p · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5672up · Cisco
All versions, or not specified · source: NVD
N6
Nexus 6001 · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3341
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3341
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35338
www.securityfocus.com
http://www.securityfocus.com/bid/69266
www.securitytracker.com
http://www.securitytracker.com/id/1030746
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95329
More from Nexus 5000
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2013-1192
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary…
–
CVE-2013-1178
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and…
–
CVE-2012-1357
The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service…
–
CVE-2012-0352
Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5,…