Terra-master vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Terra-master products: 1 record(s), with severity, exploitation and fixes.

Terramaster Operating System 1

Exploited only (KEV) →

CVE-2022-24990 High · 7.5 KEV Urgent · 89 Public exploit Ransomware CWE-306 Feb 7, 2023

TerraMaster OS Remote Command Execution Vulnerability

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.