Lucene search
HistoryAug 19, 2014 - 11:16 a.m.
CVE-2014-3341
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.4%
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.
Affected configurations
Node
cisconx-osRange≤7.0\(3\)n1\(1\)
ORcisconx-osMatch5.0\(2\)n1\(1\)
ORcisconx-osMatch5.0\(2\)n2\(1\)
ORcisconx-osMatch5.0\(2\)n2\(1a\)
ORcisconx-osMatch5.0\(3\)n1\(1c\)
ORcisconx-osMatch5.0\(3\)n2\(1\)
ORcisconx-osMatch5.0\(3\)n2\(2\)
ORcisconx-osMatch5.0\(3\)n2\(2a\)
ORcisconx-osMatch5.0\(3\)n2\(2b\)
ORcisconx-osMatch5.1\(3\)n1\(1\)
ORcisconx-osMatch5.1\(3\)n1\(1a\)
ORcisconx-osMatch5.1\(3\)n2\(1\)
ORcisconx-osMatch5.1\(3\)n2\(1a\)
ORcisconx-osMatch5.1\(3\)n2\(1b\)
ORcisconx-osMatch5.1\(3\)n2\(1c\)
ORcisconx-osMatch5.2\(1\)n1\(1\)
ORcisconx-osMatch5.2\(1\)n1\(1a\)
ORcisconx-osMatch5.2\(1\)n1\(1b\)
ORcisconx-osMatch5.2\(1\)n1\(2\)
ORcisconx-osMatch5.2\(1\)n1\(2a\)
ORcisconx-osMatch5.2\(1\)n1\(3\)
ORcisconx-osMatch5.2\(1\)n1\(4\)
ORcisconx-osMatch5.2\(1\)n1\(5\)
ORcisconx-osMatch5.2\(1\)n1\(6\)
ORcisconx-osMatch5.2\(1\)n1\(7\)
ORcisconx-osMatch5.2\(1\)n1\(8\)
ORcisconx-osMatch5.2\(1\)n1\(8a\)
ORcisconx-osMatch6.0\(2\)n1\(2\)
ORcisconx-osMatch6.0\(2\)n1\(2a\)
ORcisconx-osMatch6.0\(2\)n2\(1\)
ORcisconx-osMatch6.0\(2\)n2\(1b\)
ORcisconx-osMatch6.0\(2\)n2\(2\)
ORcisconx-osMatch6.0\(2\)n2\(3\)
ORcisconx-osMatch6.0\(2\)n2\(4\)
ORcisconx-osMatch6.0\(2\)n2\(5\)
ORcisconx-osMatch7.0\(0\)n1\(1\)
ORcisconx-osMatch7.0\(1\)n1\(1\)
ORcisconx-osMatch7.0\(2\)n1\(1\)
cisconexus_5000Match-
ORcisconexus_5010Match-
ORcisconexus_5010p_switchMatch-
ORcisconexus_5020Match-
ORcisconexus_5020p_switchMatch-
ORcisconexus_5548pMatch-
ORcisconexus_5548upMatch-
ORcisconexus_5596tMatch-
ORcisconexus_5596upMatch-
ORcisconexus_56128pMatch-
ORcisconexus_5672upMatch-
Node
cisconx-osRange≤7.0\(3\)n1\(1\)
ORcisconx-osMatch6.0\(2\)n1\(2\)
ORcisconx-osMatch6.0\(2\)n1\(2a\)
ORcisconx-osMatch6.0\(2\)n2\(1\)
ORcisconx-osMatch6.0\(2\)n2\(1b\)
ORcisconx-osMatch6.0\(2\)n2\(2\)
ORcisconx-osMatch6.0\(2\)n2\(3\)
ORcisconx-osMatch6.0\(2\)n2\(4\)
ORcisconx-osMatch6.0\(2\)n2\(5\)
ORcisconx-osMatch7.0\(0\)n1\(1\)
ORcisconx-osMatch7.0\(1\)n1\(1\)
ORcisconx-osMatch7.0\(2\)n1\(1\)
cisconexus_6001Match-
ORcisconexus_6004Match-
ORcisconexus_6004xMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | nx-os | * | cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(2)n1(1) | cpe:2.3:o:cisco:nx-os:5.0\(2\)n1\(1\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(2)n2(1) | cpe:2.3:o:cisco:nx-os:5.0\(2\)n2\(1\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(2)n2(1a) | cpe:2.3:o:cisco:nx-os:5.0\(2\)n2\(1a\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(3)n1(1c) | cpe:2.3:o:cisco:nx-os:5.0\(3\)n1\(1c\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(3)n2(1) | cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(1\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(3)n2(2) | cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(2\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(3)n2(2a) | cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(2a\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.0(3)n2(2b) | cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(2b\):*:*:*:*:*:*:* |
| cisco | nx-os | 5.1(3)n1(1) | cpe:2.3:o:cisco:nx-os:5.1\(3\)n1\(1\):*:*:*:*:*:*:* |
Related
nessus
nessus
Cisco NX-OS Software SNMP Information Disclosure (CVE-2014-3341)
2023-07-25 00:00:00
cvelist
cvelist
CVE-2014-3341
2014-08-19 10:00:00
cisco
cisco
Cisco NX-OS Software SNMP Information Disclosure Vulnerability
2014-08-18 22:26:35
cve
cve
CVE-2014-3341
2014-08-19 11:16:58
openvas
openvas
prion
prion
Design/Logic Flaw
2014-08-19 11:16:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.4%
Related for NVD:CVE-2014-3341