Description
TerraMaster TOS存在远程代码执行漏洞。此漏洞是由于验证不正确导致的。
TerraMaster TOS远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2020-28188/
https://nvd.nist.gov/vuln/detail/cve-2022-24990
https://www.rapid7.com/db/vulnerabilities/terramaster-tos-cve-2020-28188/
https://www.sonicwall.com/blog/terramaster-remote-command-execution-vulnerability
https://ssd-disclosure.com/ssd-advisory-terramaster-os-exportuser-php-remote-code-execution/
https://app.opencve.io/cve/?vendor=terra-master
https://brandefense.io/security-news/critical-security-vulnerabilities-detected-in-terramaster-tos/
https://github.com/ZZ-SOCMAP/CVE-2022-24990
https://zhuanlan.zhihu.com/p/646400737
https://blog.csdn.net/qq_36334672/article/details/136450448
https://www.cdcxht.com/4/9516/1518427
https://avd.aliyun.com/product?prod=terramaster_operating_system&page=1
https://www.cnvd.org.cn/flaw/show/CNVD-2019-00663
https://www.exploit-db.com/exploits/50635
https://www.saury.net/2514.html