Unscored severity · published Feb 26, 2009
CVE-2009-0615
Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote…
–
CVSS
2%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Application Control Engine Device Manager · Cisco
through 1.2; 1.1 · source: NVD
AN
Application Networking Manager · Cisco
through 1.2; 1.1 · source: NVD
Affected product
AC
Application Control Engine Device Manager
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0615
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0615
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/33903
www.securitytracker.com
http://www.securitytracker.com/id?1021770