# CVE-2008-4128

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

- Page: https://www.vulneraibility.com/cve/CVE-2008-4128
- CVSS: 8.1
- Known exploited: yes, in CISA KEV since 2026-07-13; CISA due date 2026-07-16
- EPSS: 33.87%
- Public exploit code: 1 on Exploit-DB (first 2008-09-17)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2026-07-13)
- Weakness: CWE-352
- Published: 2008-09-18

## Affected

- cisco:ios

## References

- [exploit] https://www.exploit-db.com/exploits/6476
- [other] https://exchange.xforce.ibmcloud.com/vulnerabilities/45226
- [other] http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html
- [exploit] https://www.exploit-db.com/exploits/6477
- [other] http://www.securityfocus.com/bid/31218
- [advisory] https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/1/CSA_IMPROVE_ROUTER_HYGIENE.PDF
- [mitigation] https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4128

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.