CVE-2008-6449: Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before...

Security readout for executives and security teams

CVE-2008-6449 is a CSRF weakness in several Century Systems XR routers. If an administrator is authenticated to the router, a remote attacker may be able to cause configuration changes through unspecified vectors. Router configuration changes can affect connectivity and security controls, but the public record does not show active exploitation. Exposure is most likely where affected Century Systems XR router web administration is reachable and administrators use browser sessions against it. Organizations without these legacy routers are not affected based on the provided sources. Treat this as a legacy network-device hygiene issue with moderate urgency. Prioritize any exposed or business-critical Century Systems XR routers because unauthorized configuration changes could disrupt routing or weaken controls. Mitigation focus: Upgrade XR-410, XR-510, and XR-440 to the fixed versions named in advisories.; Check Century Systems and JVN guidance for other XR-510 to XR-730 models.; Restrict router administration access to trusted management networks..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.