Vulnerability in Softnas Cloud
CVE-2019-9945
SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid user credentials. If customers have not followed SoftNAS deployment best practices and expose SoftNAS StorageCenter ports directly to the internet, this vulnerability allows an attacker to gain access to the Webadmin interface to create new users or execute arbitrary commands with administrative privileges, compromising both the platform and the data.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.058 (93.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 93.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.058 · newest: 0.058 · change: 0.000
Affected products
- Softnas Cloud — versions 4.2.0, 4.2.1
References
- www.digitaldefense.com/blog/2019-softnas-cloud-zero-day-blog/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2019-9945?
- CVE-2019-9945 is a critical-severity vulnerability in Softnas Cloud. CVSS score: 9.8/10. Published 2019-03-23.
- How severe is CVE-2019-9945?
- Critical severity. CVSS v3 base score is 9.8 out of 10.