CVE-2018-4030

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0702 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:getcujo:smart_firewall:7003:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-03-21 16:29

Updated : 2024-02-04 20:20


NVD link : CVE-2018-4030

Mitre link : CVE-2018-4030

CVE.ORG link : CVE-2018-4030


JSON object : View

Products Affected

getcujo

  • smart_firewall
CWE
CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')