CVE-2018-14417

EPSS 89.6%

Vexday Risk Score

45Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS —EPSS 89.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

27 Jul 2018Public PoC

03 Aug 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/45097/unverified exploitdbwww.exploit-db.com/exploits/45097unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://docs.softnas.com/display/SD/Release+Notes http://seclists.org/fulldisclosure/2018/Jul/85 https://www.coresecurity.com/advisories/softnas-cloud-os-command-injection https://www.exploit-db.com/exploits/45097/http://www.securityfocus.com/bid/104914