CVE-2014-3341
Medium
Description
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Cisco Nx-os
PublishedAug 19, 2014
First seenAug 19, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco nx-os | v ≤ 7.0\(3\)n1\(1\), 5.0\(2\)n1\(1\), 5.0\(2\)n2\(1\), 5.0\(2\)n2\(1a\), 5.0\(3\)n1\(1c\), 5.0\(3\)n2\(1\), 5.0\(3\)n2\(2\), 5.0\(3\)n2\(2a\), 5.0\(3\)n2\(2b\), 5.1\(3\)n1\(1\), 5.1\(3\)n1\(1a\), 5.1\(3\)n2\(1\), 5.1\(3\)n2\(1a\), 5.1\(3\)n2\(1b\), 5.1\(3\)n2\(1c\), 5.2\(1\)n1\(1\), 5.2\(1\)n1\(1a\), 5.2\(1\)n1\(1b\), 5.2\(1\)n1\(2\), 5.2\(1\)n1\(2a\), 5.2\(1\)n1\(3\), 5.2\(1\)n1\(4\), 5.2\(1\)n1\(5\), 5.2\(1\)n1\(6\), 5.2\(1\)n1\(7\), 5.2\(1\)n1\(8\), 5.2\(1\)n1\(8a\), 6.0\(2\)n1\(2\), 6.0\(2\)n1\(2a\), 6.0\(2\)n2\(1\), 6.0\(2\)n2\(1b\), 6.0\(2\)n2\(2\), 6.0\(2\)n2\(3\), 6.0\(2\)n2\(4\), 6.0\(2\)n2\(5\), 7.0\(0\)n1\(1\), 7.0\(1\)n1\(1\), 7.0\(2\)n1\(1\) | — |
| cisco nexus_5000 | No range specified | — |
| cisco nexus_5010 | No range specified | — |
| cisco nexus_5010p_switch | No range specified | — |
| cisco nexus_5020 | No range specified | — |
| cisco nexus_5020p_switch | No range specified | — |
| cisco nexus_5548p | No range specified | — |
| cisco nexus_5548up | No range specified | — |
| cisco nexus_5596t | No range specified | — |
| cisco nexus_5596up | No range specified | — |
| cisco nexus_56128p | No range specified | — |
| cisco nexus_5672up | No range specified | — |
| cisco nexus_6001 | No range specified | — |
| cisco nexus_6004 | No range specified | — |
| cisco nexus_6004x | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.