CVE-2009-1161 in the critical feed json
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in…
published 2009-05-21 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1161
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 16.5%
- EPSS 16.5% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.
Patch / fix
Exploit prediction
16.53% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
cisco.com
/en/US/products/products_security_advisory09186a0080ab7b56.shtml
vendor-advisory, patch
-
jvndb.jvn.jp
/ja/contents/2009/JVNDB-2009-000032.html
third-party-advisory
-
securityfocus.com
/bid/35040
vdb-entry
-
jvn.jp
/en/jp/JVN62527913/index.html
third-party-advisory
-
osvdb.org
/54616
vdb-entry
-
securitytracker.com
/id?1022263
vdb-entry
-
vupen.com
/english/advisories/2009/1390
vdb-entry
-
secunia.com
/advisories/35179
third-party-advisory
Sources
- CVE List CVE-2009-1161
- NVD CVE-2009-1161
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.