Unscored severity · published May 21, 2009
CVE-2009-1161
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security…
–
CVSS
16.5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Ciscoworks Common Services · Cisco
3.0.3; 3.0.4; 3.0.5; 3.0.6; 3.1; 3.1.1; +1 more · source: NVD
CH
Ciscoworks Health And Utilization Monitor · Cisco
1.0; 1.1 · source: NVD
CL
Ciscoworks Lan Management Solution · Cisco
2.5; 2.6; 3.0; 3.1 · source: NVD
CQ
Ciscoworks Qos Policy Manager · Cisco
4.0; 4.1 · source: NVD
CV
Ciscoworks Voice Manager · Cisco
3.0; 3.1 · source: NVD
SM
Security Manager · Cisco
3.0; 3.1; 3.2 · source: NVD
TR
Telepresence Readiness Assessment Manager · Cisco
1.0 · source: NVD
UO
Unified Operations Manager · Cisco
1.0; 1.1; 2.0; 2.1 · source: NVD
UP
Unified Provisioning Manager · Cisco
1.0; 1.1; 1.2; 1.3 · source: NVD
US
Unified Service Monitor · Cisco
1.0; 1.1; 2.0; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1161
jvn.jp
http://jvn.jp/en/jp/JVN62527913/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html
osvdb.org
http://osvdb.org/54616
secunia.com
http://secunia.com/advisories/35179
securitytracker.com
http://securitytracker.com/id?1022263
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml
More from Ciscoworks Common Services
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2011-4237
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers…
–
CVE-2011-2042
The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the…
–
CVE-2011-3310
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service…
–
CVE-2011-0966
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read…