Vulnerability Details CVE-2008-6449
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v2 Score 4.0
References
- http://jvn.jp/en/jp/JVN67573833/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
- http://secunia.com/advisories/31173
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
- http://jvn.jp/en/jp/JVN67573833/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
- http://secunia.com/advisories/31173
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
Products affected by CVE-2008-6449
-
cpe:2.3:h:centurysys:xr-1100:*
-
cpe:2.3:h:centurysys:xr-410-l2:*
-
cpe:2.3:h:centurysys:xr-410:*
-
cpe:2.3:h:centurysys:xr-440:*
-
cpe:2.3:h:centurysys:xr-510:*
-
cpe:2.3:h:centurysys:xr-540:*
-
cpe:2.3:h:centurysys:xr-640-l2:*
-
cpe:2.3:h:centurysys:xr-640:*
-
cpe:2.3:h:centurysys:xr-730:*