CVE-2008-4128
Đã công bố⚠ ĐANG BỊ KHAI THÁC (CISA KEV)Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.
Bản gốc tiếng Anh — hệ thống đang dịch tự động, tải lại trang sau ít phút.
- CNA cấp mã
- mitre
- Ngày công bố
- 19/09/2008
- Cập nhật
- 24/09/2026
- CVSS (NVD)
- 8.1 · HIGH
- Loại lỗi (CWE)
- n/a
- EPSS (FIRST)
- 33.87% khả năng bị khai thác trong 30 ngày
- CISA KEV
- Cisco IOS — Cisco IOS Cross-Site Request Forgery Vulnerability. Đưa vào 2026-07-13, hạn khắc phục 2026-07-16. Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Sản phẩm bị ảnh hưởng
- — — n/a
Tham chiếu (5)
- https://www.exploit-db.com/exploits/6476 [exploit, x_refsource_EXPLOIT-DB]
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45226 [vdb-entry, x_refsource_XF]
- http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html [x_refsource_MISC]
- https://www.exploit-db.com/exploits/6477 [exploit, x_refsource_EXPLOIT-DB]
- http://www.securityfocus.com/bid/31218 [vdb-entry, x_refsource_BID]
Tin tức liên quan trên HueCA-CYBER (1)
- CISA hướng dẫn bảo vệ router Cisco chống tấn công từ Nga · Qualys Blog · 30/10/2026