CVE-2020-28190

TerraMaster TOS = 4.2.06 was found to check for updates of both system and applications via an insecure channel HTTP. Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates...

CVE-2020-28190

TerraMaster TOS up to version 4.2.06 checks for updates over HTTP, enabling MITM interception that can serve weaponized updates. Multiple sources (NVD, Red Hat CVE page, OpenVAS listing) describe the same issue affecting the update channel, with open evidence of insecure transmission. The only cl...

CVE-2020-28190

TerraMaster TOS = 4.2.06 was found to check for updates of both system and applications via an insecure channel HTTP. Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates...