What’s Vulnerable › Vulnerabilities

CVE-2014-3341

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-08-19 · updated 2026-06-17
• Weakness: CWE-200

Description

The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.

Affected products

• Cisco Nexus 5000: all versions
• Cisco Nexus 5010: all versions
• Cisco Nexus 5010P Switch: all versions
• Cisco Nexus 5020: all versions
• Cisco Nexus 5020P Switch: all versions
• Cisco Nexus 5548P: all versions
• Cisco Nexus 5548Up: all versions
• Cisco Nexus 5596T: all versions
• Cisco Nexus 5596Up: all versions
• Cisco Nexus 56128P: all versions
• Cisco Nexus 5672Up: all versions
• Cisco Nexus 6001: all versions
• Cisco Nexus 6004: all versions
• Cisco Nexus 6004X: all versions
• Cisco NX-OS: through 7.0\(3\)n1\(1\); 5.0(2)n1(1), 5.0(2)n2(1), 5.0(2)n2(1a), 5.0(3)n1(1c), 5.0(3)n2(1), 5.0(3)n2(2) (+31)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35338
• http://www.securityfocus.com/bid/69266
• http://www.securitytracker.com/id/1030746
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95329
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35338
• http://www.securityfocus.com/bid/69266
• http://www.securitytracker.com/id/1030746
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95329

Get alerted when CVE-2014-3341 or the next vulnerability affects your stack