CVE-2018-14417

A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

89.58% chance of exploitation in the next 30 days, 100th percentile

Published

2018-08-03

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://seclists.org/fulldisclosure/2018/Jul/85
• https://www.coresecurity.com/advisories/softnas-cloud-os-command-injection

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/45097

References

• CVE Record
• NVD entry

Related

• CVE-2018-14403
• CVE-2018-14418
• CVE-2018-14402
• CVE-2018-14420
• CVE-2018-14401
• CVE-2018-14430