VulnRadar

Data against noise.

Page generated: 10 Nov 2026, 18:00 UTC

CVE-2008-4128

Read full description

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.

CVSS 8.1 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.4/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 8.1: +1.21
Fresh EPSS: 33.87%: +0.17

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 10 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Manufacturing Business Technology

Press · 16 Jul 2026, 07:00 · CISA, Partners Urge Router Hygiene to Counter State-Sponsored Russian Hacking - Manufacturing Business Technology

iTnews

Press · 16 Jul 2026, 07:00 · Russian spies hunt for routers running legacy protocols with default credentials - iTnews

CyberSecurityNews

Press · 14 Jul 2026, 07:00 · CISA Warns of Decades-Old Cisco IOS Vulnerability Actively Exploited in Attacks - CyberSecurityNews

Cyber Press

Press · 14 Jul 2026, 07:00 · CISA Warns 18-Year-Old Cisco IOS Vulnerability Exploited for Arbitrary Command Execution - Cyber Press

The Hacker News

Press · 14 Jul 2026, 07:00 · U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support - The Hacker News

See all 10 source documents

CSO Online

Press · 13 Jul 2026, 07:00 · Governments to enterprises: Improve your router security hygiene - CSO Online

Cybersecurity Dive

Press · 13 Jul 2026, 07:00 · US authorities warn that state-linked hackers are targeting vulnerable networking devices - Cybersecurity Dive

SC Media

Press · 13 Jul 2026, 07:00 · CISA adds Cisco IOS flaw to known exploited vulnerabilities catalog | brief - SC Media

Security Affairs

Press · 13 Jul 2026, 07:00 · U.S. CISA adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog - Security Affairs

CyberScoop

Press · 13 Jul 2026, 07:00 · Officials once again warn defenders that Russian hackers are targeting network devices - CyberScoop

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.4 (2026-11-02 15:11). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Source entries and unverified repository candidates are counted separately.

Public exploit evidence

exploitdb #6476 2008-09-17

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 8.1; EPSS 33.9%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, no prior privileges, user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:57:20.402472+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Published

18 Sep 2008, 20:00

Added to the CISA KEV catalog

13 Jul 2026, 00:00

First press mention

13 Jul 2026, 07:00

Latest press mention

16 Jul 2026, 07:00

Score calculated

05 Nov 2026, 13:57

PoCs on GitHub

1 repositories