It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending a specifically crafted input to /tos/index.php?app/del.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html | |
| https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ | Exploit Third Party Advisory |
| http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html | |
| https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html - | |
| References | () https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ - Exploit, Third Party Advisory |
12 Jun 2023, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 May 2022, 16:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
| CPE | cpe:2.3:h:terra-master:f2-210:-:*:*:*:*:*:*:* cpe:2.3:o:terra-master:tos:4.2.15-2107141517:*:*:*:*:*:*:* cpe:2.3:h:terra-master:f4-210:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo |
25 Apr 2022, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-25 11:15
Updated : 2024-11-21 06:33
NVD link : CVE-2021-45837
Mitre link : CVE-2021-45837
CVE.ORG link : CVE-2021-45837
JSON object : View
Products Affected
terra-master
- f4-210
- f2-210
- tos
CWE