CVE-2022-44419

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges...

CVE-2022-44419

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges...

CVE-2022-44419

CVE-2022-44419 affects the modem’s NAS security mode handling, where missing verification of NAS Security Mode Command Replay Attacks in LTE allows a local attacker to cause denial of service without extra privileges. The issue is described across multiple sources as a local impact with a high av...

RTM Locker's First Linux Ransomware Strain Targeting NAS and ESXi Hosts

The threat actors behind RTM Locker have developed a ransomware strain that's capable of targeting Linux machines, marking the group's first foray into the open source operating system. "Its locker ransomware infects Linux, NAS, and ESXi hosts and appears to be inspired by Babuk ransomware's leak...

Dell PowerScale OneFS elevation of privilege vulnerability (CNVD-2023-65221)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS, which can be exploited by attackers to cause a denial of service, privilege escalation, a...

PVS server lost the connection to vDisk after storage failover.

vDisks are located in NAS storage which is created as failover group. After storage failover occurs, PVS server loses the connection to the vDisks and does not automatically recover it. Target devices freeze during that time since the vDisk I/O to NAS storage stops...

Dell PowerScale OneFS Information Disclosure Vulnerability (CNVD-2023-65223)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from an information disclosure vulnerability that originates when a program exposes sensitive information to unauthorized actors,...

SUSE CVE-2009-1579

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program...

Known NAS Backup Issues With Nutanix Files Integration

Known Issues Issue 1: Disabling "multi-protocol access" within Nutanix breaks NAS Backup When Nutanix storage has been added to Veeam Backup & Replication using Nutanix Files System integration, if "multi-protocol access" is disabled within the Nutanix configuration, Veeam Backup & Replication wi...

CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added three flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active abuse in the wild. Included among the three is CVE-2022-24990, a bug affecting TerraMaster network-attached storage TNAS devices...

CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added three flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active abuse in the wild. Included among the three is CVE-2022-24990, a bug affecting TerraMaster network-attached storage TNAS devices...

North Korean Hackers Targeting Healthcare with Ransomware to Fund its Operations

State-backed hackers from North Korea are conducting ransomware attacks against healthcare and critical infrastructure facilities to fund illicit activities, U.S. and South Korean cybersecurity and intelligence agencies warned in a joint advisory. The attacks, which demand cryptocurrency ransoms ...

CVE-2022-24990

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response...

CVE-2022-24990

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response...

Default credentials

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response...

CVE-2022-24990

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response...

CVE-2022-24990

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response...

CVE-2022-24990

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending “User-Agent: TNAS” to module/api.php?mobile/webNasIPS and then reading the PWD field in the response. Recent assessments: cbeek-r7 at July 26, 2024 7:31pm UTC reported: A July 2024 bullet...

CVE-2022-24990

CVE-2022-24990 — TerraMaster NAS : TerraMaster OS (TOS) 4.2.29 and earlier allows unauthenticated remote attackers to leak the administrator password by sending a crafted request to api.php?mobile/webNasIPS and reading the PWD field in the response, enabling further compromise. Public references ...

Dell PowerScale OneFS weak encryption vulnerability

Dell PowerScale OneFS, a Dell USA company that provides the PowerScale OneFS operating system for scale-out NAS, has a weak encryption vulnerability that could be exploited by a local attacker with privileges to compromise the entire system...