What’s Vulnerable › Vulnerabilities

CVE-2018-10080

• Severity: high (CVSS 8.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-04-13 · updated 2026-06-17
• Weakness: CWE-345

Description

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.

Affected products

• Secutech Project Ris-11 Firmware: 5.07.52_es_fri01
• Secutech Project Ris-22 Firmware: 5.07.52_es_fri01
• Secutech Project Ris-33 Firmware: 5.07.52_es_fri01

References

• https://www.exploit-db.com/exploits/44393/
• https://www.exploit-db.com/exploits/44393/

Get alerted when CVE-2018-10080 or the next vulnerability affects your stack