PT-2009-1919 · Century Systems · Xr-410+2
Hirotaka Katagiri
·
Publicado
2009-03-09
·
Atualizado
2017-08-17
·
CVE-2008-6449
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:H/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Century Systems routers including XR-410 versions prior to 1.6.9
Century Systems routers including XR-510 versions prior to 3.5.3
Century Systems routers including XR-440 versions prior to 1.7.8
Century Systems routers including XR series routers from XR-510 to XR-730 (affected versions not specified)
Description:
A cross-site request forgery (CSRF) issue allows remote attackers to modify the configuration of the router as the administrator. The exact vectors used for the attack are not specified.
Recommendations:
For XR-410 versions prior to 1.6.9, update to version 1.6.9 or later.
For XR-510 versions prior to 3.5.3, update to version 3.5.3 or later.
For XR-440 versions prior to 1.7.8, update to version 1.7.8 or later.
For XR series routers from XR-510 to XR-730, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Xr-410
Xr-440
Xr-510