Vulnerability Spotlight: Multiple Vulnerabilities in CUJO Smart Firewall, Das U-Boot, OCTEON SDK, Webroot Bright Cloud

Summary: Cisco Talos disclosed multiple vulnerabilities in the CUJO Smart Firewall, Das U-Boot, the OCTEON SDK, and Webroot BrightCloud, including two code execution flaws (TALOS-2018-0653 and TALOS-2018-0672) in the parsing of mDNS messages. The affected versions include CUJO Smart Firewall 7003, OCTEON-SDK 3.1.2 to 5.1, and Das U-Boot 2013.07-rc1 to 2014.07-rc2, and CUJO AI has issued a firmware update that is typically deployed automatically.
Key Takeaway: The mDNS code execution flaws sit in a low-privileged chroot-ed process, but Talos notes they can be chained with a verified boot bypass to permanently compromise the device - a firewall appliance whose whole job is protecting the network it sits on.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026