Cisco IOS Cross-Site Request Forgery Vulnerability

HIGH 8.1EXPLOITED (CISA KEV)CVE-2008-4128 · Published 18/09/2008 · updated 24/09/2026

Cisco IOS Cross-Site Request Forgery Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 13/07/2026. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
IOS Cisco	Versions not published yet (product named by CISA KEV)

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

References

jbrownsec.blogspot.com/2008/09/cisco-0day-released.html · Broken Link
securityfocus.com/bid/31218 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/45226 · Third Party Advisory
exploit-db.com/exploits/6476 · Exploit
exploit-db.com/exploits/6477 · Exploit
media.defense.gov/2026/Jul/09/2003959498/-1/-1/1/CSA_IMPROVE_ROUTER_HYGIENE.PDF · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html · Product
CISA KEV · CVE-2008-4128

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free