CVE:CVE-2008-6449
CNNVD:CNNVD-200903-171
多个Century Systems routers中包括XR-410 1.6.9版本之前的版本, XR-510 3.5.3之前的版本, XR-440 v1.7.8之前的版本, 以及其它从XR-510至XR-730的XR系列路由器中存在跨站请求伪造漏洞。远程攻击者可以借助未知向量，仿效管理员修改设置。
solution:Upgrade centurysys xr-1100 to a higher version than 1.6.2,and avoid the version (,1.6.2]; Upgrade centurysys xr-410 to a higher version than 1.6.8,and avoid the version (,1.6.8]; Upgrade centurysys xr-410-l2 to a higher version than 1.6.1,and avoid the version (,1.6.1]; Upgrade centurysys xr-440 to a higher version than 1.7.7,and avoid the version (,1.7.7]; Upgrade centurysys xr-510 to a higher version than 3.5.0,and avoid the version (,3.5.0]; Upgrade centurysys xr-540 to a higher version than 3.5.2,and avoid the version (,3.5.2]; Upgrade centurysys xr-640 to a higher version than 1.6.7,and avoid the version (,1.6.7]; Upgrade centurysys xr-640-l2 to a higher version than 1.6.1,and avoid the version (,1.6.1]; Upgrade centurysys xr-730 to a higher version than 3.5.0,and avoid the version (,3.5.0]