How severe is CVE-2018-4031?

CVE-2018-4031 has a CVSS 3.x base score of 10.0, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2018-4031 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (84th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2018-4031?

CVE-2018-4031 affects Getcujo Smart Firewall. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2018-4031?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2018-4031 published?

CVE-2018-4031 was published on 2019-10-31 and last updated on 2026-06-17.

CVE-2018-4031

CVE-2018-4031 is a critical-severity vulnerability in Getcujo Smart Firewall with a CVSS 3.x base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-94.

Key facts

Severity: Critical (CVSS 3.x base score 10.0)
CVSS v2: 10.0
EPSS exploit prediction: 3% (84th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-94
Affected product: Getcujo Smart Firewall
Published: 2019-10-31
Last modified: 2026-06-17

Description

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without prior sanitization, which results in arbitrary Lua script execution in the kernel. An attacker could send an HTTP request to exploit this vulnerability.

Frequently asked questions

What is CVE-2018-4031?: An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without prior sanitization, which results in arbitrary Lua script execution in the kernel. An attacker could send an HTTP request to exploit this vulnerability.
How severe is CVE-2018-4031?: CVE-2018-4031 has a CVSS 3.x base score of 10.0, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2018-4031 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (84th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2018-4031?: CVE-2018-4031 affects Getcujo Smart Firewall. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2018-4031?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2018-4031 published?: CVE-2018-4031 was published on 2019-10-31 and last updated on 2026-06-17.

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0703

Affected products (1)

cpe:2.3:a:getcujo:smart_firewall:7003:*:*:*:*:*:*:*

More vulnerabilities in Getcujo Smart Firewall

CVE-2018-4003 — Critical (CVSS 9.8): An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware…
CVE-2018-3985 — Critical (CVSS 9.8): An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS…
CVE-2018-3963 — High (CVSS 8.0): An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When…
CVE-2018-3969 — High (CVSS 7.8): An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add…
CVE-2018-4030 — High (CVSS 7.5): An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies…
CVE-2018-4011 — High (CVSS 7.5): An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003.…

All CVEs affecting Getcujo Smart Firewall →

Other CWE-94 (Code Injection) vulnerabilities

CVE-2026-57624 — Critical (CVSS 10.0): Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.
CVE-2026-10134 — Critical (CVSS 10.0): IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read…
CVE-2026-53576 — Critical (CVSS 10.0): Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter…
CVE-2026-10561 — Critical (CVSS 10.0): IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined…
CVE-2026-25470 — Critical (CVSS 10.0): Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin…
CVE-2026-48836 — Critical (CVSS 10.0): Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.

Browse all CWE-94 (Code Injection) vulnerabilities →