Beveiligingsadvies

CVE-2022-24989

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-20 00:00:00

Laatst bijgewerkt 2024-10-08 14:30:47

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.

← Alle CVE's bekijken Bekijk op cve.org ↗