CVE-2018-4002
HIGHCUJO Smart Firewall Firmware 7003 - Unauthenticated Denial of Service via mDNS Label Compression Pointer Handling
Title source: llmDescription
An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. When parsing labels in mDNS packets, the firewall unsafely handles label compression pointers, leading to an uncontrolled recursion that eventually exhausts the stack, crashing the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0671
Scores
CVSS v3
7.5
EPSS
0.0157
EPSS Percentile
72.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-674
Status
published
Products (1)
cujo/smart_firewall_firmware
7003
Published
Oct 31, 2019
Tracked Since
Feb 18, 2026