Vulnerabilities

TI-2018-02999 CVE-2018-4031 · GHSA-m3xq-c6mf-v376

Code injection in CUJO

MEDIUM 48

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02669 Published 2019-10-31 No fix listed CWE-94

TI-2018-02931 CVE-2018-3963 · GHSA-665f-qp36-gp6g

MEDIUM 40

An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02612 Published 2019-03-21 No fix listed CWE-77

TI-2018-02998 CVE-2018-4030 · GHSA-547r-pc3f-h39w

LOW 35

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01168 Published 2019-03-21 No fix listed CWE-444

TI-2018-02979 CVE-2018-4011 · GHSA-whw3-pv3m-qccm

LOW 36

An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01323 Published 2019-03-21 No fix listed CWE-191

TI-2018-02953 CVE-2018-3985 · GHSA-x6vq-vc9q-792p

MEDIUM 46

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01857 Published 2019-03-21 No fix listed CWE-415

TI-2018-02937 CVE-2018-3969 · GHSA-q2x2-24ph-2wxf

LOW 35

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00501 Published 2019-03-21 No fix listed CWE-78

TI-2018-02971 CVE-2018-4003 · GHSA-v346-9qx9-79fj

MEDIUM 46

An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01829 Published 2019-03-21 No fix listed CWE-787