TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
| https://forum.terra-master.com/en/viewforum.php?f=28 | Issue Tracking Release Notes |
| https://github.com/0xf4n9x/CVE-2022-24990 | Exploit Third Party Advisory |
| https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation/ | Exploit Third Party Advisory |
| https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33732 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2023-02-07 18:15
Updated : 2024-06-28 13:44
NVD link : CVE-2022-24990
Mitre link : CVE-2022-24990
CVE.ORG link : CVE-2022-24990
JSON object : View
Products Affected
terra-master
- u8-322-9100
- f4-421
- u16-722-2224
- f2-210
- u12-722-2224
- t9-423
- u8-423
- u24-722-2224
- f2-223
- f5-422
- u4-211
- u12-322-9100
- u4-423
- f2-423
- u16-322-9100
- u8-111
- t6-423
- t9-450
- f2-422
- u8-722-2224
- f5-221
- t12-423
- f4-423
- u8-522-9400
- terramaster_operating_system
- u12-423
- u4-111
- f4-422
- t12-450
- f2-221
CWE
CWE-306
Missing Authentication for Critical Function