Lucene search
MitreCVELIST:CVE-2022-24989HistoryAug 20, 2023 - 12:00 a.m.
CVE-2022-24989
2023-08-2000:00:00
mitre
www.cve.org
1
terramaster
nas
remote code execution
TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.
Related
thn
thn
Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking
2022-03-07 16:42:00
nvd
nvd
CVE-2022-24989
2023-08-20 18:15:09
CVE-2022-24990
2023-02-07 18:15:09
prion
prion
Code injection
2023-08-20 18:15:00
Default credentials
2023-02-07 18:15:00
nessus
nessus
TerraMaster TOS < 4.2.30 Command Injection (CVE-2022-24990)
2023-06-02 00:00:00
cve
cve
CVE-2022-24989
2023-08-20 18:15:09
CVE-2022-24990
2023-02-07 18:15:09
packetstorm
packetstorm
TerraMaster TOS 4.2.29 Remote Code Execution
2023-06-13 00:00:00
metasploit
metasploit
attackerkb
attackerkb
openvas
openvas
githubexploit
githubexploit
nuclei
nuclei
TerraMaster TOS < 4.2.30 Server Information Disclosure
2022-03-08 01:05:30
cvelist
cvelist
CVE-2022-24990
2023-02-07 00:00:00
cnvd
cnvd
TerraMaster TOS Identity Bypass Vulnerability
2022-03-09 00:00:00
TerraMasterTOS Command Injection Vulnerability
2022-03-09 00:00:00
cisa_kev
cisa_kev
TerraMaster OS Remote Command Execution Vulnerability
2023-02-10 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-06-16 20:40:51
ics
ics