CVE-2024-34539

2024-06-1400:00:00

mitre

github.com

terramaster tos firmware

hardcoded credentials

remote attacker

privileged actions

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. These credentials can also be used to login to the administration panel and to perform privileged actions.

References

shinnai.altervista.org/exploits/SH-20240611-CVE-2024-34539.html