What’s Vulnerable › Vulnerabilities

CVE-2011-2738

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-09-19 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.

Affected products

• Ciscoworks Lan Management Solution: 3.0, 3.0-december_2007, 3.1, 3.2, 4.0, 4.0.1
• Cisco Unified Operations Manager: through 8.5; 1.0, 1.1, 2.0, 2.0.1, 2.0.2, 2.0.3 (+4)
• Cisco Unified Service Monitor: through 8.5; 1.1, 2.0, 2.0.1, 2.1, 2.2, 2.3 (+1)
• EMC Ionix Acm: through 2.3
• EMC Ionix Asam: through 3.2.0.2
• EMC Ionix Ip: through 8.1.1.1

References

• http://secunia.com/advisories/45979
• http://secunia.com/advisories/46016
• http://secunia.com/advisories/46052
• http://secunia.com/advisories/46053
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351e.shtml
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351f.shtml
• http://www.osvdb.org/75442
• http://www.securityfocus.com/archive/1/519646/100/0/threaded
• http://www.securityfocus.com/bid/49627
• http://www.securityfocus.com/bid/49644
• http://www.securitytracker.com/id?1026046
• http://www.securitytracker.com/id?1026047

Get alerted when CVE-2011-2738 or the next vulnerability affects your stack