JVN#62527913 Directory traversal vulnerability in multiple Cisco Systems products

Multiple Cisco Systems products are vulnerable to directory traversal due to an issue in CiscoWorks Common Services.

Impact

A remote attacker could view or alter files on the target server.

Solution

Update the software
Update to the latest version of CiscoWorks Common Services according the information provided by the vendor.

Workarounds
As a workaround to this vulnerability, disable the TFTP service until the software is updated.

Products Affected

• CiscoWorks Common Services 3.0.x
• CiscoWorks Common Services 3.1.x
• CiscoWorks Common Services 3.2.x
  Products are affected when the above software is being run on Windows with the TFTP service enabled. For more information, refer to the vendor’s website.

Note that the Solaris version is not affected.