CVE:CVE-2018-10080
CNNVD:CNNVD-201804-719
Secutech RiS-11、RiS-22和RiS-33都是委内瑞拉Secutech公司的无线接入点设备。
使用5.07.52_es_FRI01版本固件的Secutech RiS-11、RiS-22和RiS-33中存在安全漏洞。攻击者可借助goform/AdvSetDns?GO=wan_dns.asp请求及特制的管理员cookie利用该漏洞更改DNS设置。
solution:Upgrade secutech_project ris-11_firmware to a higher version than 5.07.52_es_fri01,and avoid the version 5.07.52_es_fri01; Upgrade secutech_project ris-22_firmware to a higher version than 5.07.52_es_fri01,and avoid the version 5.07.52_es_fri01; Upgrade secutech_project ris-33_firmware to a higher version than 5.07.52_es_fri01,and avoid the version 5.07.52_es_fri01