An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramaster_TNAS-00E43A_config_backup.bin without permission.
7.5CVSS
7.5AI Score
0.002EPSS
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=public %25252Fadmin_OnlyRead.txt substring.
6.5CVSS
6.3AI Score
0.001EPSS
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring.
7.5CVSS
7.6AI Score
0.006EPSS