vulnwire
8.1high

CVE-2008-4128KEVin critical feed1 exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Ser…

Published 18 y ago · modified 44 d ago · JSON

CVSS
8.1
v3.1 · CNA
CISA KEV
Yes
added 2026-07-13
EPSS
33.9%
percentile 98%
Public exploits
1
Exploit-DB

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

Known exploited (CISA KEV)

Added
3 mo ago
Due date
2026-07-16 (3 mo ago)
Ransomware use
Unknown
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Vendor / product
Cisco / IOS
CISA name
Cisco IOS Cross-Site Request Forgery Vulnerability

CISA SSVC assessment

Exploitation
Active — exploited in the wild
Automatable
no
Technical impact
total
Assessed
3 mo ago

Exploit prediction (EPSS)

33.87% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-6476 Cisco Router - HTTP Administration Cross-Site Request Forgery / Command Execution (1) · remote · 2008-09-17

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.18.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CNA3.18.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
Technology feeds
Cisco IOS (RSS, critical only)

References

  • exploit-db.com /exploits/6476 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/45226 · vdb-entry, x_refsource_XF, x_transferred
  • jbrownsec.blogspot.com /2008/09/cisco-0day-released.html · x_refsource_MISC, x_transferred
  • exploit-db.com /exploits/6477 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityfocus.com /bid/31218 · vdb-entry, x_refsource_BID, x_transferred
  • media.defense.gov /2026/Jul/09/2003959498/-1/-1/1/CSA_IMPROVE_ROUTER_HYGIENE.PDF · third-party-advisory
  • cisco.com /c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html · mitigation
  • cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4128 · government-resource

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.