CVE Feed

    Dashboard / CVE / CVE-2009-1161

    CVE-2009-1161

    Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

    Published:May 21, 2009
    Last Modified:Apr 23, 2026
    EPS:May 21, 2009
    EPSS Score:0.01439
    CVSS Score:10

    Affected Products

    Vendor
    Cisco
    Product
    Ciscoworks Common Services
    Vendor
    Cisco
    Product
    Ciscoworks Health And Utilization Monitor
    Vendor
    Cisco
    Product
    Ciscoworks Lan Management Solution
    Vendor
    Cisco
    Product
    Ciscoworks Qos Policy Manager
    Vendor
    Cisco
    Product
    Ciscoworks Voice Manager
    Vendor
    Cisco
    Product
    Security Manager
    Vendor
    Cisco
    Product
    Telepresence Readiness Assessment Manager
    Vendor
    Cisco
    Product
    Unified Operations Manager
    Vendor
    Cisco
    Product
    Unified Provisioning Manager
    Vendor
    Cisco
    Product
    Unified Service Monitor

    Exploits

    No exploit reference

    Related CVEs

    CVE-2011-4237 (CVSS 4.3) — CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime …
    CVE-2011-2042 (CVSS 5) — The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows r…
    CVE-2011-3310 (CVSS 9) — The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN M…
    CVE-2011-0966 (CVSS 6.8) — Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks C…
    CVE-2011-0961 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Comm…
    CVE-2010-3036 (CVSS 10) — Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Com…
    CVE-2008-2054 (CVSS 9.3) — Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to e…
    CVE-2005-0356 (CVSS 5) — Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps optio…
    CVE-2004-0112 (CVSS 5) — The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not…
    CVE-2004-0081 (CVSS 5) — OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High