CVE-2011-2738
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and...
Affects 6 products across 2 vendors.
This vulnerability was disclosed in 2011. A critical vulnerability affects Cisco systems (CVE-2011-2738). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
BSID: BS-2011-GLOBAL-088410-C • Model: rule-based-v1 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2011-2738?
What is the CVSS score for CVE-2011-2738?
Is CVE-2011-2738 actively exploited?
How do I remediate CVE-2011-2738?
What systems are affected by CVE-2011-2738?
| CVE ID | CVE-2011-2738 |
|---|---|
| BSID | BS-2011-GLOBAL-088410-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2011-09-19 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 55% |
| Domains | |
| Source | NVD |
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
Source: NIST NVD / MITRE CVE Database
Vulnerability details: Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code v CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.
Exploitation Likelihood: LOW
| Vendor | Product | Fixed Version |
|---|---|---|
| Cisco | Ciscoworks Lan Management Solution | — |
| Cisco | Unified Operations Manager | — |
| Cisco | Unified Service Monitor | — |
| Emc | Ionix Acm | — |
| Emc | Ionix Asam | — |
| Emc | Ionix Ip | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | rule-based-v1 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 540250cf79e929c030327457c8ca9eec8cde6fb7f5265fab193df60795b2176cc2d8398c3dc9050c0b9bc6f2775b75650791f0558b7950f8fe1babf3c21bb9c2 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →