CVE:CVE-2008-4128
CNNVD:CNNVD-200809-259
871 Integrated Services Router上的Cisco IOS 12.4的HTTP Administration 组件中存在跨站请求伪造漏洞。远程攻击者可以通过(1) 对 /level/15/exec/- URI的某个"s展示特权"命令, 以及 (2)对 /level/15/exec/-/configure/http URI的某个"化名执行" 命令，以执行任意指令。
solution:Upgrade cisco ios to a higher version than 12.4,and avoid the version 12.4