Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-345,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| secutech_project | ris-22_firmware | 5.07.52_es_fri01 |
| secutech_project | ris-11_firmware | 5.07.52_es_fri01 |
| secutech_project | ris-33_firmware | 5.07.52_es_fri01 |