Terra Master: community verdicts

1 notable / known-exploited Terra Master CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Terra Master CVE, see NVD ↗.

CVE-2022-24990HIGH 7.5KEVEPSS 84%
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.