4

CVE-2008-6449

Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Centurysys ≫ Xr-1100 Version <= 1.6.2
Centurysys ≫ Xr-410 Version <= 1.6.8
Centurysys ≫ Xr-410-l2 Version <= 1.6.1
Centurysys ≫ Xr-440 Version <= 1.7.7
Centurysys ≫ Xr-510 Version <= 3.5.0
Centurysys ≫ Xr-540 Version <= 3.5.2
Centurysys ≫ Xr-640 Version <= 1.6.7
Centurysys ≫ Xr-640-l2 Version <= 1.6.1
Centurysys ≫ Xr-730 Version <= 3.5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.491
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 4.9 4.9
AV:N/AC:H/Au:N/C:N/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.