50
CVE-2018-10080
PoC —CVSS 3.0
8.6 high
EPSS
<1%p44
Published
()
Modified
Description
Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.
- Vendors
- secutech project
- Products
- ris-11 firmware, ris-22 firmware, ris-33 firmware
- Weakness
- CWE-345
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N