CVE-2008-4128
published 2008-09-18CVE-2008-4128: Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow…
critical9.3CVSS 3.1
AVNACMAuNCCICAC
EXPLOIT
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
No detection rules found.
No writeups or analysis indexed.
http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.htmlhttp://www.securityfocus.com/bid/31218https://exchange.xforce.ibmcloud.com/vulnerabilities/45226https://www.exploit-db.com/exploits/6476https://www.exploit-db.com/exploits/6477http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.htmlhttp://www.securityfocus.com/bid/31218https://exchange.xforce.ibmcloud.com/vulnerabilities/45226https://www.exploit-db.com/exploits/6476https://www.exploit-db.com/exploits/6477
2008-09-18
Published