Cross site request forgery (csrf)

2018-04-1304:29:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.6%

JSON

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.

CPENameOperatorVersion
ris-11_firmwareeq5.7.52-es-fri1
ris-22_firmwareeq5.7.52-es-fri1
ris-33_firmwareeq5.7.52-es-fri1

Name	Operator	Version
ris-11_firmware	eq	5.7.52-es-fri1
ris-22_firmware	eq	5.7.52-es-fri1
ris-33_firmware	eq	5.7.52-es-fri1

References

www.exploit-db.com/exploits/44393/