Lucene search
PRIOn knowledge basePRION:CVE-2018-14417HistoryAug 04, 2018 - 1:29 a.m.
Command injection
2018-08-0401:29:00
PRIOn knowledge base
www.prio-n.com
5
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the ‘recentVersion’ parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.
Related
zdt
zdt
SoftNAS Cloud OS Command Injection Vulnerability
2018-07-27 00:00:00
cvelist
cvelist
CVE-2018-14417
2018-08-03 16:00:00
coresecurity
coresecurity
SoftNAS Cloud OS Command Injection
2018-07-26 00:00:00
cve
cve
CVE-2018-14417
2018-08-04 01:29:03
exploitpack
exploitpack
SoftNAS Cloud 4.0.3 - OS Command Injection
2018-07-27 00:00:00
nvd
nvd
CVE-2018-14417
2018-08-04 01:29:03
packetstorm
packetstorm
SoftNAS Cloud OS Command Injection
2018-07-27 00:00:00
exploitdb
exploitdb
SoftNAS Cloud < 4.0.3 - OS Command Injection
2018-07-27 00:00:00