CVE-2018-10080

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52esFRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wandns.asp request in conjunction with a crafted admin cookie...

CVE-2018-10080

CVE-2018-10080 affects Secutech RiS-11, RiS-22, and RiS-33 devices running firmware 5.07.52_es_FRI01. The vulnerability allows changing DNS settings via the HTTP goform/AdvSetDns?GO=wan_dns.asp endpoint when an attacker has a crafted admin cookie. The connected sources confirm the affected produc...

CVE-2018-10080: Insufficient Verification of Data Authenticity

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52esFRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wandns.asp request in conjunction with a crafted admin cookie...

Secutech RiS-11/RiS-22/RiS-33 5.07.52_es_FRI01 Remote DNS Changer

Secutech RiS-11/RiS-22/RiS-33 V5.07.52esFRI01 Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable systems or devices w...

Secutech RiS-11/RiS-22/RiS-33 - Remote DNS Change

Secutech RiS-11/RiS-22/RiS-33 V5.07.52esFRI01 Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable systems or devices w...

PT-2018-2496

Name of the Vulnerable Software and Affected Versions Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52 es FRI01 Description The issue is related to insufficient authentication of data, which can be exploited by a remote attacker to change DNS settings. This can be achieved by...