8.2
Élevée
CVE-2018-3969 An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall
Description
An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CUJO | Versions non publiées |
Autres CVE de CUJO
Les 8 CVE de CUJO →
CVE-2018-4002
An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running…
5.3
Moyenne
CVE-2018-4031
An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003
9.0
Critique
CVE-2018-3963
An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall
9.0
Critique
CVE-2018-4030
An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003
5.3
Moyenne