Intrusion PreventionCisco.IOS.HTTP.Administration.CSRF
Description
This indicates an attack attempt to exploit a Cross-Site Request Forgery Vulnerability in the HTTP Administration component in Cisco IOS.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.
Affected Products
Cisco IOS prior to 12.4
Impact
Information Spoofing: Remote attackers can impersonated as themselves as valid users on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.cisco.com/c/en/us/products/software/index.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-04-25 | 27.775 |
| ID | 55574 |
| Created | Apr 17, 2024 |
| Updated | Apr 25, 2024 |
| Risk |
|
| CVE ID | CVE-2008-4128 |
| Exploit Prediction Score | 1.0% |
| Default Action | pass |
| Active | |
| Affected OS | Other |
| Affected App | Other |