PT-2019-10763 · Cujo · Cujo Smart Firewall

Publicado 2019-03-21 · Atualizado 2022-06-07 · CVE-2018-4030

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions CUJO Smart Firewall version 7003

Description A vulnerability exists in the safe browsing function, specifically in how it parses HTTP requests. The issue lies in the incorrect extraction of the Host header from captured HTTP requests, allowing an attacker to visit malicious websites and bypass the firewall. An attacker can exploit this by sending a crafted HTTP request.

Recommendations For CUJO Smart Firewall version 7003, consider temporarily disabling the safe browsing function until a patch is available to prevent exploitation. Restrict access to unknown or untrusted websites to minimize the risk of bypassing the firewall. Avoid relying solely on the safe browsing function for security until the issue is resolved.

Exploit

Correção

HTTP Request/Response Smuggling

Enumeração de Fraquezas

CWE-444

Identificadores relacionados

CVE-2018-4030

Produtos afetados

Cujo Smart Firewall

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0702 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-4030 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-4030 · Aviso do Fabricante