CVE-2008-6449 Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to....
MediumCVSS 4.0
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| centurysys xr-1100 | <= 1.6.2 | No fix listed |
| centurysys xr-410 | <= 1.6.8 | No fix listed |
| centurysys xr-410-l2 | <= 1.6.1 | No fix listed |
| centurysys xr-440 | <= 1.7.7 | No fix listed |
| centurysys xr-510 | <= 3.5.0 | No fix listed |
| centurysys xr-540 | <= 3.5.2 | No fix listed |
| centurysys xr-640 | <= 1.6.7 | No fix listed |
| centurysys xr-640-l2 | <= 1.6.1 | No fix listed |
| centurysys xr-730 | <= 3.5.0 | No fix listed |
References
- JVN#67573833 third-party-advisory
- JVNDB-2008-000042 third-party-advisory
- 31173 third-party-advisory
- www.centurysys.co.jp vendor-advisory
- centurysystems-router-webinterface-csrf(43949) vdb-entry