Search/CVE-2009-1161
● CVE

CVE-2009-1161

VendorciscoProductsecurity manager, ciscoworks common services, ciscoworks health and utilization monitor, ciscoworks lan management solution, ciscoworks qos policy manager, ciscoworks voice manager, telepresence readiness assessment manager, unified operations manager, unified provisioning manager, unified service monitorDiscoveredMay 21, 2009UpdatedApr 23, 2026

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

View graph Watch Export
CVSS v3.1
—
EPSS
16.5%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 3.99pp
12.5% → 16.5% over 2 tracked changes
Connections
11 relationships
Timeline
disclosure → media coverage
May 21, 2009
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026