CVE-2009-1161: Cisco Ciscoworks Common Services

High severity, CVSS 10.0. EPSS: 12.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

Affected products

• Cisco Ciscoworks Common Services: version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; version 3.0.6 only; version 3.1 only; version 3.1.1 only; …
• Cisco Ciscoworks Health And Utilization Monitor: version 1.0 only; version 1.1 only
• Cisco Ciscoworks Lan Management Solution: version 2.5 only; version 2.6 only; version 3.0 only; version 3.1 only
• Cisco Ciscoworks Qos Policy Manager: version 4.0 only; version 4.1 only
• Cisco Ciscoworks Voice Manager: version 3.0 only; version 3.1 only
• Cisco Security Manager: version 3.0 only; version 3.1 only; version 3.2 only
• Cisco Telepresence Readiness Assessment Manager: version 1.0 only
• Cisco Unified Operations Manager: version 1.0 only; version 1.1 only; version 2.0 only; version 2.1 only
• Cisco Unified Provisioning Manager: version 1.0 only; version 1.1 only; version 1.2 only; version 1.3 only
• Cisco Unified Service Monitor: version 1.0 only; version 1.1 only; version 2.0 only; version 2.1 only

Published 2009-05-21. Last modified 2026-06-16.