CVE-2009-2047: Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS...

Security readout for executives and security teams

This flaw affects older Cisco contact center administration software. An authenticated remote user could abuse directory traversal in the Administration interface to read, change, or delete files on the server. That can disrupt contact center operations or expose sensitive configuration, but the source bundle does not show unauthenticated access or active exploitation. Likely exposure is limited to organizations still running Cisco CRS/UCCX versions before 7.0(1) SR2. Risk is higher where the Administration interface is reachable broadly and authenticated accounts are not tightly controlled. The bundled affected-product metadata is incomplete, so confirm exposure against Cisco records. Prioritize if the organization still operates legacy Cisco contact center infrastructure. The business risk is operational disruption and sensitive file exposure. If no affected versions remain, this is mainly a legacy inventory and assurance item. Mitigation focus: Confirm Cisco CRS/UCCX version and upgrade according to Cisco advisory guidance.; Treat versions before 7.0(1) SR2 as potentially affected.; Restrict Administration interface access to trusted management networks..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.