Description
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
References
- centurysystems-router-webinterface-csrf(43949) vdb-entry
- http://www.centurysys.co.jp/support/xr_common/JVN67573833.html
- JVNDB-2008-000042 third-party-advisory
- 31173 third-party-advisory
- JVN#67573833 third-party-advisory