CyberSec.Space Logo
CVEブラウザに戻る

CVE-2018-4003

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1570%
EPSS Percentile2.90th
Published2019年3月21日
Last Modified2024年11月21日

Vulnerability Description

An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The string lengths are handled incorrectly when parsing character strings in mDNS resource records, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

Affected Platforms (CPE)

📦
Getcujo

Smart Firewall

= 7003

References & Advisories

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0672
🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0672

関連する脆弱性情報

CVE-2018-403110.0

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the w...

CVE-2018-39859.8

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a mem...

CVE-2017-122778.8

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Fire...

CVE-2018-39638.0

An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When adding a n...