CVE-2008-6449: Centurysys XR-1100

Medium severity, CVSS 4.0. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.

Affected products

• Centurysys XR-1100: up to and including 1.6.2
• Centurysys XR-410: up to and including 1.6.8
• Centurysys XR-410-l2: up to and including 1.6.1
• Centurysys XR-440: up to and including 1.7.7
• Centurysys XR-510: up to and including 3.5.0
• Centurysys XR-540: up to and including 3.5.2
• Centurysys XR-640: up to and including 1.6.7
• Centurysys XR-640-l2: up to and including 1.6.1
• Centurysys XR-730: up to and including 3.5.0

Published 2009-03-09. Last modified 2026-06-16.