CUJO Smart Firewall 7003 Safe Browsing HTTP/HTTPS Request code injection

Summaryinfo

A vulnerability categorized as critical has been discovered in CUJO Smart Firewall 7003. This affects an unknown part of the component Safe Browsing. Such manipulation as part of HTTP/HTTPS Request leads to code injection. This vulnerability is referenced as CVE-2018-4031. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability, which was classified as very critical, has been found in CUJO Smart Firewall 7003 (Firewall Software). Affected by this issue is an unknown functionality of the component Safe Browsing. The manipulation as part of a HTTP/HTTPS Request leads to a code injection vulnerability. Using CWE to declare the problem leads to CWE-94. The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. Impacted is confidentiality, integrity, and availability. CVE summarizes:

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without prior sanitization, which results in arbitrary Lua script execution in the kernel. An attacker could send an HTTP request to exploit this vulnerability.

The bug was discovered 03/19/2019. The weakness was published 10/31/2019. This vulnerability is handled as CVE-2018-4031 since 01/02/2018. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/01/2024). The MITRE ATT&CK project declares the attack technique as T1059.

The vulnerability was handled as a non-public zero-day exploit for at least 226 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entry is available at VDB-144739. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• CUJO

Name

• Smart Firewall

Version

• 7003

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion