CVE-2018-10080 Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.
HighCVSS 8.6
EPSS 0.54%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| secutech project ris-11 firmware | = 5.07.52_es_fri01 | No fix listed |
| secutech project ris-22 firmware | = 5.07.52_es_fri01 | No fix listed |
| secutech project ris-33 firmware | = 5.07.52_es_fri01 | No fix listed |
References
- 44393 exploit third-party-advisory vdb-entry