PT-2014-5233 · Cisco · Cisco Nx-Os+1

Published 2014-08-18 · Updated 2017-08-29 · CVE-2014-3341

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 7.0(3)N1(1) and earlier

Description A vulnerability in the Simple Network Management Protocol (SNMP) module of Cisco NX-OS Software could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to a failure to respond to invalid requests in the same manner when specifying a VLAN ID. An attacker could exploit this vulnerability by making a large number of requests to the listening SNMP port of an affected device. A successful exploit could allow the attacker to enumerate VLANs that are configured on the affected device. This issue affects Cisco Nexus 5000 Series and Cisco Nexus 6000 Series devices.

Recommendations For Cisco NX-OS versions 7.0(3)N1(1) and earlier, update to a newer version of Cisco NX-OS Software that includes the fix for this issue. As a temporary workaround, consider restricting access to the SNMP module to minimize the risk of exploitation. Additionally, limit the number of requests to the SNMP port to reduce the likelihood of a successful exploit.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-3341

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 8

• 🔥 https://github.com/ehabhussein/snmpvlan · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3341 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35338 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140818-CVE-2014-3341 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95329 · Note
• http://securityfocus.com/bid/69266 · Note
• http://securitytracker.com/id/1030746 · Note