Vulnerability in Cisco Ciscoworks Lan Management Solution
CVE-2011-2738
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
EPSS: 0.110 (95.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ciscoworks_lan_management_solution — versions 3.0, 3.1, 3.2
- Cisco Unified_operations_manager — versions 1.0, 1.1, 2.0
- Cisco Unified_service_monitor — versions 1.1, 2.0, 2.0.1
- Emc Ionix_acm
- Emc Ionix_asam
- Emc Ionix_ip
- N/a — versions n/a
References
- security_alert@emc.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
- security_alert@emc.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security_alert@emc.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security_alert@emc.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- security_alert@emc.com (x_refsource_OSVDB, vdb-entry)
- security_alert@emc.com (vdb-entry, x_refsource_XF)
- security_alert@emc.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (vdb-entry, x_refsource_BID)