CVE-2018-3969

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-21 · updated 2026-06-17
Weakness: CWE-78

Description

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.

Affected products

Getcujo Smart Firewall: 7003

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0634
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0634

Get alerted when CVE-2018-3969 or the next vulnerability affects your stack