CVE-2008-4128 Cisco IOS
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the…
- CVSS
- 8.1 High
- EPSS
- 34%
- Percentile
- 98
- Published
- 2008-09-18
- Force
- 9 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
On CISA’s exploited list
Cisco IOS Cross-Site Request Forgery Vulnerability
- Added
- 2026-07-13
- Federal patch deadline
- 2026-07-16
- Ransomware use
- not known