NetSight
high8.6

CVE-2018-10080

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunc…

Impact

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.

Affected products

VendorProductAffected versions
Secutech ProjectRis-11 Firmware
Version 5.07.52_es_fri01
Secutech ProjectRis-22 Firmware
Version 5.07.52_es_fri01
Secutech ProjectRis-33 Firmware
Version 5.07.52_es_fri01

Weakness classification

References