CVE Vulnerability

CVE-2008-6449

Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.

4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 4.9 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://jvn.jp/en/jp/JVN67573833/index.html
http://www.centurysys.co.jp/support/xr_common/JVN67573833.html Vendor Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
http://secunia.com/advisories/31173
https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
Configurations

Configuration 1

cpe:2.3:h:centurysys:xr-640-l2:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-1100:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-730:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-540:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-440:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-640:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-510:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-410:*:*:*:*:*:*:*:*
cpe:2.3:h:centurysys:xr-410-l2:*:*:*:*:*:*:*:*
Information

Published : 2009-03-09 02:30

Updated : 2017-08-17 01:29

NVD link : CVE-2008-6449

Mitre link : CVE-2008-6449

Products Affected
No products.
CWE
CWE-352