CVE-2014-3341

Currently unrated

Key Information:

Vendor
Cisco
Status
Nx-os
Nexus 5000
Nexus 5010
Nexus 5010p Switch
Vendor
CVE Published:
19 August 2014

Badges

👾 Exploit Exists🟡 Public PoC

Summary

The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

snmpvlan
Created by ehabhussein

References

http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/95329
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/69266
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.