8.2
High
CVE-2018-3969 An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall
Description
An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CUJO | Versions not published |
Other CVEs of CUJO
The 8 CVEs of CUJO →
CVE-2018-4002
An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running…
5.3
Medium
CVE-2018-4031
An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003
9.0
Critical
CVE-2018-3963
An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall
9.0
Critical
CVE-2018-4030
An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003
5.3
Medium