CVE-2008-6449 Information

Description

Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9 XR-510 before 3.5.3 XR-440 before 1.7.8 and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.

Reference

http://jvn.jp/en/jp/JVN67573833/index.html http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html http://secunia.com/advisories/31173 http://www.centurysys.co.jp/support/xr_common/JVN67573833.html https://exchange.xforce.ibmcloud.com/vulnerabilities/43949