CVE-2008-4128

medium

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

References

https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/1/CSA_IMPROVE_ROUTER_HYGIENE.PDF

https://exchange.xforce.ibmcloud.com/vulnerabilities/45226

https://securityaffairs.com/195448/apt/us-and-allied-governments-recommendations-securing-network-devices-against-russian-apt-groups.html

https://www.securityweek.com/us-allies-warn-of-russian-cyberattacks-targeting-critical-infrastructure-routers/

https://thehackernews.com/2026/07/us-sanctions-first-vpn-service-and.html

https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-194a

https://www.cisa.gov/news-events/alerts/2026/07/13/cisa-adds-one-known-exploited-vulnerability-catalog

https://securityaffairs.com/195262/security/u-s-cisa-adds-a-cisco-ios-flaw-to-its-known-exploited-vulnerabilities-catalog.html

https://cyberscoop.com/russian-fsb-cisco-joint-cybersecurity-advisory/

https://www.exploit-db.com/exploits/6477

https://www.exploit-db.com/exploits/6476

https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4128

http://www.securityfocus.com/bid/31218

http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html

Details

Source: Mitre, NVD

Published: 2008-09-18

Updated: 2026-07-14

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.3368