Lucene search
PRIOn knowledge basePRION:CVE-2018-3969HistoryMar 21, 2019 - 4:29 p.m.
Design/Logic Flaw
2019-03-2116:29:00
PRIOn knowledge base
www.prio-n.com
1
An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.
| CPE | Name | Operator | Version |
|---|---|---|---|
| smart_firewall | eq | 7003 |
Related
talos
talos
CUJO Smart Firewall dhcpd.conf verified boot bypass
2019-03-19 00:00:00
cve
cve
CVE-2018-3969
2019-03-21 16:29:01
cvelist
cvelist
CVE-2018-3969
2019-03-21 15:26:08
nvd
nvd
CVE-2018-3969
2019-03-21 16:29:01
threatpost
threatpost
Host of Flaws Found in CUJO Smart Firewall
2019-03-19 21:43:08
talosblog
talosblog