Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Centurysys | Xr-1100 | <= 1.6.2 |
| Centurysys | Xr-410 | <= 1.6.8 |
| Centurysys | Xr-410-L2 | <= 1.6.1 |
| Centurysys | Xr-440 | <= 1.7.7 |
| Centurysys | Xr-510 | <= 3.5.0 |
| Centurysys | Xr-540 | <= 3.5.2 |
| Centurysys | Xr-640 | <= 1.6.7 |
| Centurysys | Xr-640-L2 | <= 1.6.1 |
| Centurysys | Xr-730 | <= 3.5.0 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN67573833/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
- http://secunia.com/advisories/31173
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.htmlVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
- http://jvn.jp/en/jp/JVN67573833/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
- http://secunia.com/advisories/31173
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.htmlVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
FAQ
What is CVE-2008-6449?
CVE-2008-6449 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to ...
How severe is CVE-2008-6449?
CVE-2008-6449 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-6449?
Check the references section above for vendor advisories and patch information. Affected products include: Centurysys Xr-1100, Centurysys Xr-410, Centurysys Xr-410-L2, Centurysys Xr-440, Centurysys Xr-510.