CVE

Id
70637  
CVE No.
CVE-2014-3341  
Status
Candidate  
Description
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671533 70637 CVE-2014-3341 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=35338  View
671534 70637 CVE-2014-3341 CISCO:20140818 Cisco NX-OS Software SNMP Information Disclosure Vulnerability  View
671535 70637 CVE-2014-3341 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3341  View
671536 70637 CVE-2014-3341 BID:69266  View
671537 70637 CVE-2014-3341 URL:http://www.securityfocus.com/bid/69266  View
671538 70637 CVE-2014-3341 SECTRACK:1030746  View
671539 70637 CVE-2014-3341 URL:http://www.securitytracker.com/id/1030746  View
671540 70637 CVE-2014-3341 XF:cisco-nxos-cve20143341-info-disc(95329)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15116 JVNDB-2014-003991 Cisco Intelligent Automation for Cloud における任意のファイルをアップロードされる脆弱性 Cisco Intelligent Automation for Cloud (別名 Cisco Cloud Portal) は、ファイル送信の処理中にファイルタイプを検証しないため、任意のファイルをアップロードされる脆弱性が存在します。 CVE-2014-3349 70637 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003991.html  View