CVE-2014-3341: Cisco Nexus 5000

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.

Affected products

• Cisco Nexus 5000
• Cisco Nexus 5010
• Cisco Nexus 5010p Switch
• Cisco Nexus 5020
• Cisco Nexus 5020p Switch
• Cisco Nexus 5548p
• Cisco Nexus 5548up
• Cisco Nexus 5596t
• Cisco Nexus 5596up
• Cisco Nexus 56128p
• Cisco Nexus 5672up
• Cisco Nexus 6001
• Cisco Nexus 6004
• Cisco Nexus 6004x
• Cisco NX-OS: up to and including 7.0\(3\)n1\(1\); version 5.0(2)n1(1) only; version 5.0(2)n2(1) only; version 5.0(2)n2(1a) only; version 5.0(3)n1(1c) only; version 5.0(3)n2(1) only; …

Published 2014-08-19. Last modified 2026-06-17.