CVE-2008-4128

Name: CVE-2008-4128
Creator: NVD / NIST
Published: 2008-09-18T20:00:00.53+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 4.3/10Actively ExploitedEPSS 12.04%

Last modified Jul 14, 2026

CVE-2008-4128 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.. CISA has confirmed active exploitation in the wild. EPSS estimates a 12.04% chance of exploitation in the next 30 days.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

Metrics

CVSS 3.1

4.3/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS Probability

12.04%

95.6th percentile

Probability of exploitation in the next 30 days. Learn more

Exploitation Status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by Jul 16, 2026.

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Cisco	Ios	12.4

References

http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.htmlBroken Link
http://www.securityfocus.com/bid/31218Broken Link, Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45226Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/6476Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/6477Exploit, Third Party Advisory, VDB Entry
http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.htmlBroken Link
http://www.securityfocus.com/bid/31218Broken Link, Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45226Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/6476Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/6477Exploit, Third Party Advisory, VDB Entry
https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/1/CSA_IMPROVE_ROUTER_HYGIENE.PDFThird Party Advisory, US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4128US Government Resource
https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.htmlProduct

Timeline

Published: Sep 18, 2008
Last Modified: Jul 14, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2008-4128?

How severe is CVE-2008-4128?

CVE-2008-4128 has a CVSS score of 4.3/10 (MEDIUM severity). The EPSS model estimates a 12.04% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.

How do I fix CVE-2008-4128?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2008

View all 2008CVEs →

Are you affected by CVE-2008-4128?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST