CVE-2014-3341 in Cisco NX-OS
Summary
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.
Reservation
05/07/2014
Disclosure
08/19/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67375 | Cisco NX-OS SNMP Request information disclosure | 200 | Unproven | Official fix | CVE-2014-3341 |