Softnas Cloud vulnerabilities

CVE-2018-14417 [CRITICAL] CWE-78 CVE-2018-14417: A command injection vulnerability was found in the web administration console in SoftNAS Cloud befor A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.

CVE-2019-9945 [CRITICAL] CVE-2019-9945: SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid user credentials. If customers have not followed SoftNAS deploym