Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-1161

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

Published

2009-05-21T14:30:00.390

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco ciscoworks_common_services 3.0.3 Yes
Application cisco ciscoworks_common_services 3.0.4 Yes
Application cisco ciscoworks_common_services 3.0.5 Yes
Application cisco ciscoworks_common_services 3.0.6 Yes
Application cisco ciscoworks_common_services 3.1 Yes
Application cisco ciscoworks_common_services 3.1.1 Yes
Application cisco ciscoworks_common_services 3.2 Yes
Application cisco ciscoworks_health_and_utilization_monitor 1.0 Yes
Application cisco ciscoworks_health_and_utilization_monitor 1.1 Yes
Application cisco ciscoworks_lan_management_solution 2.5 Yes
Application cisco ciscoworks_lan_management_solution 2.6 Yes
Application cisco ciscoworks_lan_management_solution 3.0 Yes
Application cisco ciscoworks_lan_management_solution 3.1 Yes
Application cisco ciscoworks_qos_policy_manager 4.0 Yes
Application cisco ciscoworks_qos_policy_manager 4.1 Yes
Application cisco ciscoworks_voice_manager 3.0 Yes
Application cisco ciscoworks_voice_manager 3.1 Yes
Application cisco security_manager 3.0 Yes
Application cisco security_manager 3.1 Yes
Application cisco security_manager 3.2 Yes
Application cisco telepresence_readiness_assessment_manager 1.0 Yes
Application cisco unified_operations_manager 1.0 Yes
Application cisco unified_operations_manager 1.1 Yes
Application cisco unified_operations_manager 2.0 Yes
Application cisco unified_operations_manager 2.1 Yes
Application cisco unified_provisioning_manager 1.0 Yes
Application cisco unified_provisioning_manager 1.1 Yes
Application cisco unified_provisioning_manager 1.2 Yes
Application cisco unified_provisioning_manager 1.3 Yes
Application cisco unified_service_monitor 1.0 Yes
Application cisco unified_service_monitor 1.1 Yes
Application cisco unified_service_monitor 2.0 Yes
Application cisco unified_service_monitor 2.1 Yes
References