CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-02-07
TerraMaster TOS 4.2.29 Unauthenticated Administrator Password Disclosure and Remote Code Execution (CVE-2022-24990)
[Affected Scope] TerraMaster NAS devices running TOS (TerraMaster Operating System) version 4.2.29 and earlier
[Impact] Unauthenticated remote attackers can retrieve the administrator password hash or plaintext by sending a crafted HTTP request, leading to complete device compromise
[Mitigation] Immediately upgrade TOS to the latest secure version (4.2.30 or higher) and restrict external internet access to the NAS management interface