Unscored severity · published Jul 16, 2009
CVE-2009-2047
Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX)…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crs · Cisco
3.5; 4.0; 4.1; 4.5; 5.0; 6.0; +1 more · source: NVD
CR
Customer Response Applications · Cisco
3.5 · source: NVD
IQ
IP QM · Cisco
3.5 · source: NVD
UC
Unified Ccx · Cisco
3.5; 4.0(1); 4.0(3); 4.0(4); 4.0(5); 4.0(5a); +5 more · source: NVD
UI
Unified IP Contact Center Express · Cisco
3.0; 5.0(1); 6.0(1); 7.0 · source: NVD
UI
Unified IP Ivr · Cisco
3.0; 3.1; 4.0; 4.1; 4.5; 5.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2047
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2047
osvdb.org
http://osvdb.org/55936
secunia.com
http://secunia.com/advisories/35861
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml
Patch
http://www.securityfocus.com/bid/35706
www.securitytracker.com
http://www.securitytracker.com/id?1022569
www.vupen.com
http://www.vupen.com/english/advisories/2009/1913
More from Crs
–
CVE-2009-2048
Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka…