CVE-2018-4030

State
Published
Severity
5.3 Medium
Published
Mar 21, 2019
Updated
Aug 5, 2024
Reserved
Jan 2, 2018

Read the record on cve.org

Description

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability.

Scores

CVSSScoreVectorSource
3.05.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Ntalos

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
CUJOn/a
  • CUJO Smart Firewall - Firmware version 7003Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.