CVE-2009-1161
Critical
Description
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Ciscoworks Common Services
PublishedMay 21, 2009
First seenMay 21, 2009
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ciscoworks_common_services | 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1, 3.1.1, 3.2 | — |
| cisco ciscoworks_health_and_utilization_monitor | 1.0, 1.1 | — |
| cisco ciscoworks_lan_management_solution | 2.5, 2.6, 3.0, 3.1 | — |
| cisco ciscoworks_qos_policy_manager | 4.0, 4.1 | — |
| cisco ciscoworks_voice_manager | 3.0, 3.1 | — |
| cisco security_manager | 3.0, 3.1, 3.2 | — |
| cisco telepresence_readiness_assessment_manager | 1.0 | — |
| cisco unified_operations_manager | 1.0, 1.1, 2.0, 2.1 | — |
| cisco unified_provisioning_manager | 1.0, 1.1, 1.2, 1.3 | — |
| cisco unified_service_monitor | 1.0, 1.1, 2.0, 2.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.