Unscored severity · published Sep 19, 2011
CVE-2011-2738
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and…
–
CVSS
11%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.0% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Ciscoworks Lan Management Solution · Cisco
3.0; 3.0; 3.1; 3.2; 4.0; 4.0.1 · source: NVD
IA
Ionix Acm · Emc
through 2.3 · source: NVD
IA
Ionix Asam · Emc
through 3.2.0.2 · source: NVD
II
Ionix IP · Emc
through 8.1.1.1 · source: NVD
UO
Unified Operations Manager · Cisco
through 8.5; 1.0; 1.1; 2.0; 2.0.1; 2.0.2; +5 more · source: NVD
US
Unified Service Monitor · Cisco
through 8.5; 1.1; 2.0; 2.0.1; 2.1; 2.2; +2 more · source: NVD
Affected product
CL
Ciscoworks Lan Management Solution
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2738
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2738
Vendor Advisory
http://secunia.com/advisories/45979
Vendor Advisory
http://secunia.com/advisories/46016
Vendor Advisory
http://secunia.com/advisories/46052
Vendor Advisory
http://secunia.com/advisories/46053
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351e.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351f.shtml
More from Ciscoworks Lan Management Solution
–
CVE-2010-3036
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary…
–
CVE-2009-1161
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security…