Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SoftNAS Cloud 命令注入漏洞
Vulnerability Description
SoftNAS Cloud是一套软件定义的NAS文件管理系统，它主要用于提供企业级NAS功能，包括加密、快照和自动故障转移等功能。 SoftNAS Cloud 4.0.3之前版本中的Web管理控制台存在命令注入漏洞，该漏洞源于snserv脚本没有过滤来自snserv端点的‘recentVersion’参数。攻击者可利用该漏洞以root权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A