Skip to content

Terra-master vulnerabilities

Products

Newest

terra-master tos Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to... CVE-2024-34539 9.4 CriticalJune 14, 2024
terra-master terramaster operating system TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via... CVE-2022-24989 Public exploit EPSS 31.9% 9.8 CriticalAugust 20, 2023
terra-master terramaster operating system, terramaster os +1 more TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative... CVE-2022-24990 In KEVPublic exploit EPSS 83.2% 7.5 HighFebruary 7, 2023
terra-master tos An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210... CVE-2021-45836 8.8 HighApril 25, 2022
terra-master tos It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2... CVE-2021-45840 9.8 CriticalApril 25, 2022
terra-master tos It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS... CVE-2021-45842 7.5 HighApril 25, 2022
terra-master tos In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session... CVE-2021-45841 Public exploit 8.1 HighApril 25, 2022
terra-master tos It is possible to obtain the first administrator's hash set up on the system in Terramaster F4... CVE-2021-45839 Public exploit 6.5 MediumApril 25, 2022
terra-master tos It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2... CVE-2021-45837 Public exploit EPSS 16.1% 9.8 CriticalApril 25, 2022
terra-master f2-210 firmware TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible... CVE-2021-30127 7.3 HighApril 3, 2021
terra-master tos TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root... CVE-2020-15568 Public exploit EPSS 29.2% 9.8 CriticalJanuary 30, 2021
terra-master tos Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated... CVE-2020-29189 8.1 HighDecember 24, 2020
terra-master tos TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an... CVE-2020-28190 5.9 MediumDecember 24, 2020
terra-master tos Multiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote... CVE-2020-28187 EPSS 16.4% 9.8 CriticalDecember 24, 2020
terra-master tos Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the... CVE-2020-28186 7.3 HighDecember 24, 2020
terra-master tos Cross-site scripting (XSS) vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated... CVE-2020-28184 5.4 MediumDecember 24, 2020
terra-master tos User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated... CVE-2020-28185 EPSS 18.3% 5.3 MediumDecember 24, 2020
terra-master tos Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote... CVE-2020-28188 Public exploit EPSS 96.5% 9.8 CriticalDecember 24, 2020
terra-master terramaster operating system An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via... CVE-2020-35665 Public exploit EPSS 78.5% 9.8 CriticalDecember 23, 2020
terra-master f2-210 firmware An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for... CVE-2019-18195 8.8 HighOctober 28, 2019
terra-master fs-210 firmware An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files... CVE-2019-18383 7.5 HighOctober 23, 2019
terra-master fs-210 firmware An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non... CVE-2019-18384 6.5 MediumOctober 23, 2019
terra-master fs-210 firmware An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can... CVE-2019-18385 7.5 HighOctober 23, 2019
terra-master terramaster operating system System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute... CVE-2018-13418 8.8 HighNovember 27, 2018
terra-master terramaster operating system User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all... CVE-2018-13361 EPSS 16.9% 5.3 MediumNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute... CVE-2018-13360 6.1 MediumNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13359 EPSS 19.9% 8.8 HighNovember 27, 2018
terra-master terramaster operating system System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13358 EPSS 24.9% 8.8 HighNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13357 5.4 MediumNovember 27, 2018
terra-master terramaster operating system Incorrect access control on ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13356 8.8 HighNovember 27, 2018
terra-master terramaster operating system Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to... CVE-2018-13355 6.5 MediumNovember 27, 2018
terra-master terramaster operating system System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13354 EPSS 22.9% 9.8 CriticalNovember 27, 2018
terra-master terramaster operating system System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13353 8.8 HighNovember 27, 2018
terra-master terramaster operating system Session Exposure in the web application for TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13352 7.5 HighNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13351 4.8 MediumNovember 27, 2018
terra-master terramaster operating system SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL... CVE-2018-13350 EPSS 16.7% 9.8 CriticalNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in the web application taskbar in TerraMaster TOS version 3.1.03 allows... CVE-2018-13349 6.1 MediumNovember 27, 2018
terra-master terramaster operating system System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13338 EPSS 10.2% 9.8 CriticalNovember 27, 2018
terra-master terramaster operating system System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13336 9.8 CriticalNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13335 5.4 MediumNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in File Manager in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13333 6.1 MediumNovember 27, 2018
terra-master terramaster operating system Directory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows... CVE-2018-13332 7.5 HighNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13331 6.1 MediumNovember 27, 2018
terra-master terramaster operating system System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13330 7.2 HighNovember 27, 2018
terra-master terramaster operating system Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13337 5.4 MediumNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute... CVE-2018-13334 6.1 MediumNovember 27, 2018
terra-master terramaster operating system Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to... CVE-2018-13329 6.1 MediumNovember 27, 2018
terra-master terramaster operating system Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster... CVE-2017-9328 9.8 CriticalSeptember 15, 2017