CVE-2018-14417

Опубликовано: 04 авг. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Высокий

Описание

A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.

Ссылки

http://seclists.org/fulldisclosure/2018/Jul/85
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/104914
Third Party Advisory
VDB Entry
https://docs.softnas.com/display/SD/Release+Notes
Vendor Advisory
https://www.coresecurity.com/advisories/softnas-cloud-os-command-injection
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45097/
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Jul/85
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/104914
Third Party Advisory
VDB Entry
https://docs.softnas.com/display/SD/Release+Notes
Vendor Advisory
https://www.coresecurity.com/advisories/softnas-cloud-os-command-injection
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45097/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:softnas:cloud:*:*:*:*:*:*:*:*

Версия до 4.0.3 (исключая)

EPSS

Процентиль: 99%

0.71897

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-9m5c-7x86-6g8r