CVE-2008-4128
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.
CISA Known Exploited Vulnerability
Vendor / Product
Cisco — IOS
Date Added
2026-07-13
Remediation Due
2026-07-16
https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2008-4128
Weakness Classification (1)
References & Advisories (8)
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
US Government Resource
Product
Exploit
Third Party Advisory
VDB Entry
Exploit
Third Party Advisory
VDB Entry
Exploit
Third Party Advisory
VDB Entry
Broken Link