CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24989

TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.776

EPSS Ranking 98.9%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2022-24989

Terra-Master » F2-210 » Version: N/A

cpe:2.3:h:terra-master:f2-210:-
Terra-Master » F2-221 » Version: N/A

cpe:2.3:h:terra-master:f2-221:-
Terra-Master » F2-223 » Version: N/A

cpe:2.3:h:terra-master:f2-223:-
Terra-Master » F2-422 » Version: N/A

cpe:2.3:h:terra-master:f2-422:-
Terra-Master » F2-423 » Version: N/A

cpe:2.3:h:terra-master:f2-423:-
Terra-Master » F4-421 » Version: N/A

cpe:2.3:h:terra-master:f4-421:-
Terra-Master » F4-422 » Version: N/A

cpe:2.3:h:terra-master:f4-422:-
Terra-Master » F4-423 » Version: N/A

cpe:2.3:h:terra-master:f4-423:-
Terra-Master » F5-221 » Version: N/A

cpe:2.3:h:terra-master:f5-221:-
Terra-Master » F5-422 » Version: N/A

cpe:2.3:h:terra-master:f5-422:-
Terra-Master » T12-423 » Version: N/A

cpe:2.3:h:terra-master:t12-423:-
Terra-Master » T12-450 » Version: N/A

cpe:2.3:h:terra-master:t12-450:-
Terra-Master » T6-423 » Version: N/A

cpe:2.3:h:terra-master:t6-423:-
Terra-Master » T9-423 » Version: N/A

cpe:2.3:h:terra-master:t9-423:-
Terra-Master » T9-450 » Version: N/A

cpe:2.3:h:terra-master:t9-450:-
Terra-Master » U12-322-9100 » Version: N/A

cpe:2.3:h:terra-master:u12-322-9100:-
Terra-Master » U12-423 » Version: N/A

cpe:2.3:h:terra-master:u12-423:-
Terra-Master » U12-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u12-722-2224:-
Terra-Master » U16-322-9100 » Version: N/A

cpe:2.3:h:terra-master:u16-322-9100:-
Terra-Master » U16-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u16-722-2224:-
Terra-Master » U24-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u24-722-2224:-
Terra-Master » U4-111 » Version: N/A

cpe:2.3:h:terra-master:u4-111:-
Terra-Master » U4-211 » Version: N/A

cpe:2.3:h:terra-master:u4-211:-
Terra-Master » U4-423 » Version: N/A

cpe:2.3:h:terra-master:u4-423:-
Terra-Master » U8-111 » Version: N/A

cpe:2.3:h:terra-master:u8-111:-
Terra-Master » U8-322-9100 » Version: N/A

cpe:2.3:h:terra-master:u8-322-9100:-
Terra-Master » U8-423 » Version: N/A

cpe:2.3:h:terra-master:u8-423:-
Terra-Master » U8-522-9400 » Version: N/A

cpe:2.3:h:terra-master:u8-522-9400:-
Terra-Master » U8-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u8-722-2224:-
Terra-Master » Terramaster Operating System » Version: N/A

cpe:2.3:o:terra-master:terramaster_operating_system:-
Terra-Master » Terramaster Operating System » Version: 3.0.33

cpe:2.3:o:terra-master:terramaster_operating_system:3.0.33
Terra-Master » Terramaster Operating System » Version: 3.1.03

cpe:2.3:o:terra-master:terramaster_operating_system:3.1.03
Terra-Master » Terramaster Operating System » Version: 4.2.06

cpe:2.3:o:terra-master:terramaster_operating_system:4.2.06
Terra-Master » Terramaster Operating System » Version: 4.2.29

cpe:2.3:o:terra-master:terramaster_operating_system:4.2.29

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24989

Products

Pricing

Contact Us