VulnerabilityModified
CVE-2008-6449
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify…
MEDIUM 4.0EPSS 0.59%
Does this matter?
Lower severity and a low EPSS score (0.59%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:H/Au:N/C:N/I:P/A:P
- EPSS
- 0.59% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- centurysys/xr-1100 · centurysys/xr-410 · centurysys/xr-410-l2 · centurysys/xr-440 · centurysys/xr-510 · centurysys/xr-540 · centurysys/xr-640 · centurysys/xr-640-l2 · centurysys/xr-730
- Source
- cve@mitre.org
References
- http://jvn.jp/en/jp/JVN67573833/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
- http://secunia.com/advisories/31173
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.htmlVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
- http://jvn.jp/en/jp/JVN67573833/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
- http://secunia.com/advisories/31173
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.htmlVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.