CVE-2009-0615: Cisco Application Control Engine Device Manager

High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."

Affected products

• Cisco Application Control Engine Device Manager: up to and including 1.2; version 1.1 only
• Cisco Application Networking Manager: up to and including 1.2; version 1.1 only

Published 2009-02-26. Last modified 2026-06-16.