CVE-2018-10080: Secutech Project Ris-11 Firmware

High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.

Affected products

• Secutech Project Ris-11 Firmware: version 5.07.52_es_fri01 only
• Secutech Project Ris-22 Firmware: version 5.07.52_es_fri01 only
• Secutech Project Ris-33 Firmware: version 5.07.52_es_fri01 only

Published 2018-04-13. Last modified 2026-06-17.