CVE-2018-4030

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0702 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:getcujo:smart_firewall:7003:*:*:*:*:*:*:*

Information

Published : 2019-03-21 04:29

Updated : 2022-06-07 05:18


NVD link : CVE-2018-4030

Mitre link : CVE-2018-4030

Products Affected
No products.
CWE
CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')