CVE-2011-5227: Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NM...

Security readout for executives and security teams

CVE-2011-5227 is a remote code execution flaw in the Syslog service of Enterasys Network Management Suite before 4.1.0.80. A specially long syslog priority field sent to UDP port 514 can overflow the service. Systems receiving syslog from untrusted networks should be treated as higher priority. Exposure is likely limited to organizations still running Enterasys Network Management Suite versions before 4.1.0.80 with the Syslog service reachable on UDP/514. Risk increases if syslog ingestion is reachable from untrusted networks or broad internal segments. Prioritize remediation for any exposed or business-critical Enterasys NMS instance. Although the available sources do not show active exploitation, the impact is serious because successful exploitation could execute code on a network management server. Mitigation focus: Upgrade Enterasys NMS to 4.1.0.80 or later if still running an affected version.; Restrict UDP/514 access to trusted syslog sources only.; Disable the Syslog service if it is not operationally required..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.