CVE-2011-2738 in the critical feed json
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and Cisc…
published 2011-09-17 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2713
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 11.0%
- EPSS 11.0% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
Exploit prediction
10.96% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
cisco.com
/en/US/products/products_security_advisory09186a0080b9351f.shtml
vendor-advisory
-
cisco.com
/en/US/products/products_security_advisory09186a0080b9351e.shtml
vendor-advisory
-
secunia.com
/advisories/46052
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/46053
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/45979
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/46016
third-party-advisory, vendor-advisory
-
securitytracker.com
/id?1026048
vdb-entry
-
osvdb.org
/75442
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/69828
vdb-entry
-
securityfocus.com
/bid/49627
vdb-entry
-
securityfocus.com
/bid/49644
vdb-entry
-
securitytracker.com
/id?1026059
vdb-entry
-
securitytracker.com
/id?1026047
vdb-entry
-
securitytracker.com
/id?1026046
vdb-entry
-
securityfocus.com
/archive/1/519646/100/0/threaded
mailing-list
Sources
- CVE List CVE-2011-2738
- NVD CVE-2011-2738
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.