CVE-2018-14417 in Cloudinformación

Resumen

por MITRE

A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2018-07-19

Divulgación

2018-08-03

Moderación

aceptado

Artículo

VDB-122580

CPE

listo

Explotación

Descargar

EPSS

0.89575

KEV

no

Actividades

muy bajo

Sector

Hostingprovider, Pharma, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2018-14417
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2018-14417
CVE Detailshttps://www.cvedetails.com/cve/CVE-2018-14417/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!