Lucene search
MitreCVELIST:CVE-2018-14417HistoryAug 03, 2018 - 4:00 p.m.
CVE-2018-14417
2018-08-0316:00:00
mitre
www.cve.org
0.686 Medium
EPSS
Percentile
98.0%
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the ‘recentVersion’ parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.
Related
zdt
zdt
SoftNAS Cloud OS Command Injection Vulnerability
2018-07-27 00:00:00
prion
prion
Command injection
2018-08-04 01:29:00
coresecurity
coresecurity
SoftNAS Cloud OS Command Injection
2018-07-26 00:00:00
cve
cve
CVE-2018-14417
2018-08-04 01:29:03
packetstorm
packetstorm
SoftNAS Cloud OS Command Injection
2018-07-27 00:00:00
exploitpack
exploitpack
SoftNAS Cloud 4.0.3 - OS Command Injection
2018-07-27 00:00:00
nvd
nvd
CVE-2018-14417
2018-08-04 01:29:03
exploitdb
exploitdb
SoftNAS Cloud < 4.0.3 - OS Command Injection
2018-07-27 00:00:00