İçeriğe atla
Noroxi

terra-master kayıtları

terra-master üreticisine ait 48 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %2,1
Silahlaştırılmış
7 · %14,6
Pre-auth RCE
10
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
3 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

48 kayıt
  • CVE-2022-24990
    85Hemen

    TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/a

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %83

    terra-master · terramaster operating system7 Şub 2023

  • CVE-2020-28188
    68Bu hafta

    Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /

    KritikCVSS 9,8SilahlaştırılmışEPSS %96

    terra-master · tos24 Ara 2020

  • CVE-2020-35665
    63Bu hafta

    An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter

    KritikCVSS 9,8SilahlaştırılmışEPSS %78

    terra-master · terramaster operating system23 Ara 2020

  • CVE-2022-24989
    60Bu hafta

    TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for

    KritikCVSS 9,8SilahlaştırılmışEPSS %31

    terra-master · terramaster operating system20 Ağu 2023

  • CVE-2021-45837
    60Bu hafta

    It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending a specifically c

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    terra-master · tos25 Nis 2022

  • CVE-2021-45841
    60Bu hafta

    In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session cookies by knowing the target's MAC address a

    YüksekCVSS 8,1SilahlaştırılmışEPSS %8

    terra-master · tos25 Nis 2022

  • CVE-2020-15568
    48Planlayın

    TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root.

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    terra-master · tos30 Oca 2021

  • CVE-2018-13354
    46Planlayın

    System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" param

    KritikCVSS 9,8İstismar yokEPSS %22

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13350
    44Planlayın

    SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter.

    KritikCVSS 9,8İstismar yokEPSS %16

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2020-28187
    44Planlayın

    Multiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote authenticated attackers to read, edit or delete any f

    KritikCVSS 9,8İstismar yokEPSS %16

    terra-master · tos24 Ara 2020

  • CVE-2018-13358
    42Planlayın

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" p

    YüksekCVSS 8,8İstismar yokEPSS %24

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13338
    42Planlayın

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" pa

    KritikCVSS 9,8İstismar yokEPSS %10

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13336
    42Planlayın

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" paramet

    KritikCVSS 9,8İstismar yokEPSS %9

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13359
    41Planlayın

    Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "modgroup" parameter.

    YüksekCVSS 8,8İstismar yokEPSS %19

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2017-9328
    41Planlayın

    Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execu

    KritikCVSS 9,8İstismar yokEPSS %7

    terra-master · terramaster operating system15 Eyl 2017

  • CVE-2021-45839
    40Planlayın

    It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) as

    OrtaCVSS 6,5SilahlaştırılmışEPSS %9

    terra-master · tos25 Nis 2022

  • CVE-2021-45840
    40Planlayın

    It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending specifically cra

    KritikCVSS 9,8İstismar yokEPSS %3

    terra-master · tos25 Nis 2022

  • CVE-2018-13353
    37İzleyin

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute commands via the "checkport" paramete

    YüksekCVSS 8,8İstismar yokEPSS %5

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13418
    37İzleyin

    System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter.

    YüksekCVSS 8,8İstismar yokEPSS %5

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2024-34539
    37İzleyin

    Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server.

    KritikCVSS 9,4İstismar yokEPSS %0

    14 Haz 2024

  • CVE-2021-45836
    36İzleyin

    An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by injecting a

    YüksekCVSS 8,8İstismar yokEPSS %2

    terra-master · tos25 Nis 2022

  • CVE-2018-13356
    36İzleyin

    Incorrect access control on ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to elevate user permissions.

    YüksekCVSS 8,8İstismar yokEPSS %2

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2019-18195
    36İzleyin

    An issue was discovered on TerraMaster FS-210 4.0.19 devices.

    YüksekCVSS 8,8İstismar yokEPSS %1

    terra-master · f2-210 firmware28 Eki 2019

  • CVE-2020-29189
    33İzleyin

    Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction an

    YüksekCVSS 8,1İstismar yokEPSS %1

    terra-master · tos24 Ara 2020

  • CVE-2021-45842
    31İzleyin

    It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) on the system as

    YüksekCVSS 7,5İstismar yokEPSS %2

    terra-master · tos25 Nis 2022