PT-2019-4262 · Softnas+1 · Softnas Cloud+1

Published 2019-03-23 · Updated 2020-08-24 · CVE-2019-9945

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SoftNAS Cloud versions 4.2.0 through 4.2.1

Description The issue is related to the NGINX default configuration file, which has an inadequate check for a user cookie. This allows an attacker to provide an arbitrary value for the cookie and access the web interface without valid credentials. If SoftNAS StorageCenter ports are exposed directly to the internet, an attacker can gain access to the Webadmin interface, create new users, or execute arbitrary commands with administrative privileges, compromising the platform and data.

Recommendations For SoftNAS Cloud versions 4.2.0 and 4.2.1, consider restricting access to the Webadmin interface until a patch is available. As a temporary workaround, avoid exposing SoftNAS StorageCenter ports directly to the internet to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2019-04865

CVE-2019-9945

Affected Products

Nginx

Softnas Cloud

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-9945 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9945 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04865 · Security Note
• https://vuldb.com/?id.132132 · Note
• https://digitaldefense.com/blog/2019-softnas-cloud-zero-day-blog · Note
• https://cxsecurity.com/cveshow/CVE-2019-9945 · Note