CVE-2018-4031
Last modified
CVE-2018-4031 is a critical-severity vulnerability rated 10/10 on the CVSS scale. An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. EPSS estimates a 2.67% chance of exploitation in the next 30 days.
Description
An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without prior sanitization, which results in arbitrary Lua script execution in the kernel. An attacker could send an HTTP request to exploit this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Getcujo | Smart Firewall | 7003 |
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0703Exploit, Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0703Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-4031?
How severe is CVE-2018-4031?
How do I fix CVE-2018-4031?
Are you affected by CVE-2018-4031?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST