6 matches found
CVE-2022-24990
CVE-2022-24990 説明 - CVE-2022-24990 の実証コード: PHP オブジェクトインスタンス化を介した TerraMaster TOS の未認証リモートコマンド実行。 - 作成者: antx, 日付: 2022-04-12。 詳細 - この脆弱性により、リモート攻撃者が対象システム上で任意のコマンドを実行できる可能性があります。 - 脆弱性は、api.php スクリプト内の webNasIPS...
Default credentials
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response...
CVE-2021-45839
It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/webNasIPS endpoint...
CVE-2021-45839
It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/webNasIPS endpoint...
CVE-2021-45839: Undefined Security Weakness
It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/webNasIPS endpoint...
