CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...

CVE-2019-18385

creationtimestamp| type| source ---|---|--- 2024-01-27 09:11:44+00:00| seen| https://t.me/ctinow/174704...

CVE-2019-18385

The CVE relates to TerraMaster FS-210 devices running 4.0.19 where an unauthenticated attacker can download log files through the include/makecvs.php?Event= substring. This is an information-disclosure vulnerability affecting the NAS’s web-accessible log files; the root cause is an insecure endpo...