CVE-2021-45840

It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 by sending specifically crafted input to /tos/index.php?app/appstartstop...

CVE-2021-45840

The CVE-2021-45840 entry affects Terramaster F4-210 and F2-210 running TOS 4.2.X (4.2.15-2107141517). A root-command execution vulnerability exists via crafted input to /tos/index.php?app/app_start_stop, allowing an attacker to execute arbitrary commands with root privileges. Connected sources co...