PT-2008-5427 · Cisco · Cisco Ios

Jeremy Brown · Published 2008-09-18 · Updated 2023-05-22 · CVE-2008-4128

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS version 12.4 on the 871 Integrated Services Router

Description The issue allows remote attackers to execute arbitrary commands. This is achieved through cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component. Specifically, the vulnerabilities can be exploited via certain commands to specific API endpoints, such as the show privilege command to the "/level/15/exec/-" URI and the alias exec command to the "/level/15/exec/-/configure/http" URI.

Recommendations For Cisco IOS version 12.4 on the 871 Integrated Services Router, consider disabling access to the HTTP Administration component until a fix is available. Restrict access to the /level/15/exec/- and /level/15/exec/-/configure/http API endpoints to minimize the risk of exploitation. Avoid using the show privilege and alias exec commands in the affected API endpoints until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-4128

Affected Products

Cisco Ios

References · 6

• 🔥 https://exploit-db.com/exploits/6476 · Exploit
• 🔥 https://exploit-db.com/exploits/6477 · Exploit
• 🔥 http://securityfocus.com/bid/31218 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4128 · Security Note
• http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45226 · Note