← Back

CVE-2008-6449

nvd nist
Published: Mar 9, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:H/Au:N/C:N/I:P/A:P
Exploitability: 4.9 / Impact: 4.9
Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.

Affected (9)

Centurysys
9 products
Xr 1100
Xr 410
Xr 410 L2
Xr 440
Xr 510
Xr 540
Xr 640
Xr 640 L2
Xr 730
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Xr 1100
Up to 1.6.2
Xr 410
Up to 1.6.8
Xr 410 L2
Up to 1.6.1
Xr 440
Up to 1.7.7
Xr 510
Up to 3.5.0
Xr 540
Up to 3.5.2
Xr 640
Up to 1.6.7
Xr 640 L2
Up to 1.6.1
Xr 730
Up to 3.5.0

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (10)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.