CVE-2018-14417
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 89%
from disclosure to weaponsame day
Published on NVDAug 3
1st PoCJul 27
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45097cve_referencewww.exploit-db.com/exploits/45097/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.