CVE-2018-14417
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 90%
from disclosure to weapon0 days
Published on NVDAug 3
1st PoCJul 27
exploitation probability
90%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45097cve_referencewww.exploit-db.com/exploits/45097/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.