CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24990

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.944

EPSS Ranking 100.0%

CVSS Severity

CVSS v3 Score 7.5

Proposed Action

TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.

Ransomware Campaign

Known

References

Products affected by CVE-2022-24990

Terra-Master » F2-210 » Version: N/A

cpe:2.3:h:terra-master:f2-210:-
Terra-Master » F2-221 » Version: N/A

cpe:2.3:h:terra-master:f2-221:-
Terra-Master » F2-223 » Version: N/A

cpe:2.3:h:terra-master:f2-223:-
Terra-Master » F2-422 » Version: N/A

cpe:2.3:h:terra-master:f2-422:-
Terra-Master » F2-423 » Version: N/A

cpe:2.3:h:terra-master:f2-423:-
Terra-Master » F4-421 » Version: N/A

cpe:2.3:h:terra-master:f4-421:-
Terra-Master » F4-422 » Version: N/A

cpe:2.3:h:terra-master:f4-422:-
Terra-Master » F4-423 » Version: N/A

cpe:2.3:h:terra-master:f4-423:-
Terra-Master » F5-221 » Version: N/A

cpe:2.3:h:terra-master:f5-221:-
Terra-Master » F5-422 » Version: N/A

cpe:2.3:h:terra-master:f5-422:-
Terra-Master » T12-423 » Version: N/A

cpe:2.3:h:terra-master:t12-423:-
Terra-Master » T12-450 » Version: N/A

cpe:2.3:h:terra-master:t12-450:-
Terra-Master » T6-423 » Version: N/A

cpe:2.3:h:terra-master:t6-423:-
Terra-Master » T9-423 » Version: N/A

cpe:2.3:h:terra-master:t9-423:-
Terra-Master » T9-450 » Version: N/A

cpe:2.3:h:terra-master:t9-450:-
Terra-Master » U12-322-9100 » Version: N/A

cpe:2.3:h:terra-master:u12-322-9100:-
Terra-Master » U12-423 » Version: N/A

cpe:2.3:h:terra-master:u12-423:-
Terra-Master » U12-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u12-722-2224:-
Terra-Master » U16-322-9100 » Version: N/A

cpe:2.3:h:terra-master:u16-322-9100:-
Terra-Master » U16-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u16-722-2224:-
Terra-Master » U24-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u24-722-2224:-
Terra-Master » U4-111 » Version: N/A

cpe:2.3:h:terra-master:u4-111:-
Terra-Master » U4-211 » Version: N/A

cpe:2.3:h:terra-master:u4-211:-
Terra-Master » U4-423 » Version: N/A

cpe:2.3:h:terra-master:u4-423:-
Terra-Master » U8-111 » Version: N/A

cpe:2.3:h:terra-master:u8-111:-
Terra-Master » U8-322-9100 » Version: N/A

cpe:2.3:h:terra-master:u8-322-9100:-
Terra-Master » U8-423 » Version: N/A

cpe:2.3:h:terra-master:u8-423:-
Terra-Master » U8-522-9400 » Version: N/A

cpe:2.3:h:terra-master:u8-522-9400:-
Terra-Master » U8-722-2224 » Version: N/A

cpe:2.3:h:terra-master:u8-722-2224:-
Terra-Master » Terramaster Operating System » Version: N/A

cpe:2.3:o:terra-master:terramaster_operating_system:-
Terra-Master » Terramaster Operating System » Version: 3.0.33

cpe:2.3:o:terra-master:terramaster_operating_system:3.0.33
Terra-Master » Terramaster Operating System » Version: 3.1.03

cpe:2.3:o:terra-master:terramaster_operating_system:3.1.03
Terra-Master » Terramaster Operating System » Version: 4.2.06

cpe:2.3:o:terra-master:terramaster_operating_system:4.2.06
Terra-Master » Terramaster Operating System » Version: 4.2.29

cpe:2.3:o:terra-master:terramaster_operating_system:4.2.29

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24990

Products

Pricing

Contact Us