CVE-2011-2738: cisco ciscoworks_lan_management_solution
Vulnerability summary
CVE-2011-2738 is a high (CVSS 10.0) vulnerability in cisco ciscoworks_lan_management_solution. EPSS estimates a 10.96% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities.
Timeline
- 17-09-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
10.96%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.96% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco3 products
- ciscoworks_lan_management_solution3.0 | 3.0:december_2007 | 3.1 | 3.2 | 4.0 | 4.0.1
- unified_operations_manager≤ 8.5 | 1.0 | 1.1 | 2.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.1 | 2.2 | 2.3 | 8.0
- unified_service_monitor≤ 8.5 | 1.1 | 2.0 | 2.0.1 | 2.1 | 2.2 | 2.3 | 8.0
Emc3 products
- ionix_acm≤ 2.3
- ionix_asam≤ 3.2.0.2
- ionix_ip≤ 8.1.1.1
2 vendors · 6 products
References
15 links- www.cisco.com/en/US/products/products_security_advisory09186a0080b9351f.shtmlVendor AdvisoryX Refsource CISCO
Show all 15 references
- www.cisco.com/en/US/products/products_security_advisory09186a0080b9351e.shtmlVendor AdvisoryX Refsource CISCO