What’s Vulnerable › Vulnerabilities

CVE-2008-6449

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-03-09 · updated 2026-06-16
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.

Affected products

• Centurysys Xr-1100: through 1.6.2
• Centurysys Xr-410: through 1.6.8
• Centurysys Xr-410-L2: through 1.6.1
• Centurysys Xr-440: through 1.7.7
• Centurysys Xr-510: through 3.5.0
• Centurysys Xr-540: through 3.5.2
• Centurysys Xr-640: through 1.6.7
• Centurysys Xr-640-L2: through 1.6.1
• Centurysys Xr-730: through 3.5.0

References

• http://jvn.jp/en/jp/JVN67573833/index.html
• http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
• http://secunia.com/advisories/31173
• http://www.centurysys.co.jp/support/xr_common/JVN67573833.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43949
• http://jvn.jp/en/jp/JVN67573833/index.html
• http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html
• http://secunia.com/advisories/31173
• http://www.centurysys.co.jp/support/xr_common/JVN67573833.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43949

Get alerted when CVE-2008-6449 or the next vulnerability affects your stack