CVE-2024-34539

2024-06-1415:15:50

[email protected]

web.nvd.nist.gov

hardcoded credentials

terramaster tos

remote attacker

privileged actions

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. These credentials can also be used to login to the administration panel and to perform privileged actions.

References

shinnai.altervista.org/exploits/SH-20240611-CVE-2024-34539.html