CVE-2018-4030

Summary

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability.

Affected Software

VendorProductVersion RangeStatus
n/aCUJOCUJO Smart Firewall - Firmware version 7003affected

Weaknesses

  • 'HTTP Request Smuggling

ADP Enrichment

CVE Program Container

Additional References

References