Threat intelligence / Vulnerability
CVE-2008-4128
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.
Vulnerability
TypeVulnerability
External ID—
First seen2026-07-13
Last seen2026-07-13
Confidence
—
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.
Labels
CISA KEV context
Vendor / productCisco IOS
Added2026-07-13
Due date2026-07-16
5 recorded
Relationships
2 external