ID:12818 - Exploit for Cross-site request forgery in Cisco IOS - CVE-2008-4128

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin  in the HTTP Administration component. A remote attacker can trick the victim to visit a specially crafted web page and execute arbitrary commands via "show privilege" command to the "/level/15/exec/-" URI or "alias exec" command to the "/level/15/exec/-/configure/http" URI.

Remediation