CVE-2009-1161

Published: May 21, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

Affected (33)

Products: Cisco: Ciscoworks Common Services, Ciscoworks Health And Utilization Monitor, Ciscoworks Lan Management Solution, Ciscoworks Qos Policy Manager, Ciscoworks Voice Manager, Security Manager, Telepresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, Unified Service Monitor

Cisco

10 products

Ciscoworks Common Services

Ciscoworks Health And Utilization Monitor

Ciscoworks Lan Management Solution

Ciscoworks Qos Policy Manager

Ciscoworks Voice Manager

Security Manager

Telepresence Readiness Assessment Manager

Unified Operations Manager

Unified Provisioning Manager

Unified Service Monitor

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Cisco Ciscoworks Common Services	Version 3.0.3
Cisco Ciscoworks Common Services	Version 3.0.4
Cisco Ciscoworks Common Services	Version 3.0.5
Cisco Ciscoworks Common Services	Version 3.0.6
Cisco Ciscoworks Common Services	Version 3.1.1
Cisco Ciscoworks Common Services	Version 3.1
Cisco Ciscoworks Common Services	Version 3.2
Cisco Ciscoworks Health And Utilization Monitor	Version 1.0
Cisco Ciscoworks Health And Utilization Monitor	Version 1.1
Cisco Ciscoworks Lan Management Solution	Version 2.5
Cisco Ciscoworks Lan Management Solution	Version 2.6
Cisco Ciscoworks Lan Management Solution	Version 3.0
Cisco Ciscoworks Lan Management Solution	Version 3.1
Cisco Ciscoworks Qos Policy Manager	Version 4.0
Cisco Ciscoworks Qos Policy Manager	Version 4.1
Cisco Ciscoworks Voice Manager	Version 3.0
Cisco Ciscoworks Voice Manager	Version 3.1
Cisco Security Manager	Version 3.0
Cisco Security Manager	Version 3.1
Cisco Security Manager	Version 3.2
Cisco Telepresence Readiness Assessment Manager	Version 1.0
Cisco Unified Operations Manager	Version 1.0
Cisco Unified Operations Manager	Version 1.1
Cisco Unified Operations Manager	Version 2.0
Cisco Unified Operations Manager	Version 2.1
Cisco Unified Provisioning Manager	Version 1.0
Cisco Unified Provisioning Manager	Version 1.1
Cisco Unified Provisioning Manager	Version 1.2
Cisco Unified Provisioning Manager	Version 1.3
Cisco Unified Service Monitor	Version 1.0
Cisco Unified Service Monitor	Version 1.1
Cisco Unified Service Monitor	Version 2.0
Cisco Unified Service Monitor	Version 2.1