CVE-2011-3997: Opengear ACM5000 Console Server

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

Affected products

  • Opengear ACM5000 Console Server
  • Opengear CM4000 Console Server
  • Opengear IM4004-5 Console Server
  • Opengear IM4200 Console Server
  • Opengear IMG4000 Console Server
  • Opengear KCS6000 Rackside Console Server
  • Opengear Opengear Console Server Firmware: up to and including 2.1.0u7; version 2.0.4 only; version 2.0.4u1 only; version 2.0.6 only; version 2.0.8 only; version 2.0.9 only; …

Published 2011-11-09. Last modified 2026-06-16.