CVE-2018-17431

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL

published January 29, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
84%
Percentile
99.7
In the wild
Unconfirmed
What it is

🚨 A crafted URL is all it takes to unleash chaos on your network with Comodo UTM Firewall! Think of it as a delivery driver handing over a package without checking who signed for it. This vulnerability lets attackers drop malicious code right in the middle of your secure environment, completely bypassing authentication! An attacker could execute arbitrary code, gaining access to sensitive data or even controlling the firewall itself. This could lead to devastating consequences, including data loss or further infiltration into your network. Yikes!

Put simply

Think of it as a delivery driver handing over a package without checking who signed for it. This vulnerability lets attackers drop malicious code right in the middle of your secure environment, completely bypassing authentication! This vulnerability in Comodo UTM Firewall's Web Console permits remote attackers to run any code they choose by simply sending a specially crafted URL, effectively fooling the system into granting access it shouldn't.

What to do

An attacker could execute arbitrary code, gaining access to sensitive data or even controlling the firewall itself. This could lead to devastating consequences, including data loss or further infiltration into your network. Yikes! Upgrade your Comodo UTM Firewall to version 2.7.0 or later as soon as possible to close off this glaring hole. Additionally, review your firewall settings and monitor for any suspicious activity that may have occurred. You’ve got this! Stay vigilant and secure your network like the hero you are! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.83912 · 99.7th percentile
Published
2019-01-29T23:00Z
EPSS history
Timeline
  • 29 JAN 23:00Z
    Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL
    cvelistv5