Login Request a demo
TO
Product
Terramaster Operating System
by Terra-master · last CVE Aug 20, 2023
On CISA KEVExploited in the wildRansomware-linked
28
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities28In the news0Timeline
Severity mix
Critical 7High 9Medium 12Low 0
Severity
All severities28Critical7High9Medium12Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Terramaster Operating System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-24989
9.8
32%
Aug 20
TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the…
Affected: before 4.2.31
CVE-2020-35665
9.8
78%
Dec 23
An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV…
Affected: through 4.2.06
CVE-2018-13354
9.8
23%
Nov 27
System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" parameter
Affected: 3.1.03
CVE-2018-13350
9.8
17%
Nov 27
SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter
Affected: 3.1.03
CVE-2018-13338
9.8
10%
Nov 27
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation
Affected: 3.1.03
CVE-2018-13336
9.8
9%
Nov 27
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation
Affected: 3.1.03
CVE-2017-9328
9.8
7%
Sep 15
Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root
Affected: through 3.0.33
Showing 7