CVE-2009-1161

high · 10

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

CVSS

12.5%

EPSS (exploit prob.)

96th

EPSS percentile

2009-05-21

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
cisco	ciscoworks_common_services	3.0.3
cisco	ciscoworks_common_services	3.0.4
cisco	ciscoworks_common_services	3.0.5
cisco	ciscoworks_common_services	3.0.6
cisco	ciscoworks_common_services	3.1
cisco	ciscoworks_common_services	3.1.1
cisco	ciscoworks_common_services	3.2
cisco	ciscoworks_health_and_utilization_monitor	1.0
cisco	ciscoworks_health_and_utilization_monitor	1.1
cisco	ciscoworks_lan_management_solution	2.5
cisco	ciscoworks_lan_management_solution	2.6
cisco	ciscoworks_lan_management_solution	3.0
cisco	ciscoworks_lan_management_solution	3.1
cisco	ciscoworks_qos_policy_manager	4.0
cisco	ciscoworks_qos_policy_manager	4.1
cisco	ciscoworks_voice_manager	3.0
cisco	ciscoworks_voice_manager	3.1
cisco	security_manager	3.0
cisco	security_manager	3.1
cisco	security_manager	3.2
cisco	telepresence_readiness_assessment_manager	1.0
cisco	unified_operations_manager	1.0
cisco	unified_operations_manager	1.1
cisco	unified_operations_manager	2.0
cisco	unified_operations_manager	2.1
cisco	unified_provisioning_manager	1.0
cisco	unified_provisioning_manager	1.1
cisco	unified_provisioning_manager	1.2
cisco	unified_provisioning_manager	1.3
cisco	unified_service_monitor	1.0
cisco	unified_service_monitor	1.1
cisco	unified_service_monitor	2.0
cisco	unified_service_monitor	2.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-1161