CVE-2011-2738

Critical

Description

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.

SeverityCritical
CVSS10.0
Exploit probability—
ProductCisco Unified Service Monitor
PublishedSep 19, 2011
First seenSep 19, 2011

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco unified_service_monitorv ≤ 8.5, 1.1, 2.0, 2.0.1, 2.1, 2.2, 2.3, 8.0—
cisco ciscoworks_lan_management_solution3.0, 3.1, 3.2, 4.0, 4.0.1—
cisco unified_operations_managerv ≤ 8.5, 1.0, 1.1, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1, 2.2, 2.3, 8.0—
emc ionix_acmv ≤ 2.3—
emc ionix_asamv ≤ 3.2.0.2—
emc ionix_ipv ≤ 8.1.1.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.