CVE-2022-24990

HIGH CVSS: 7.5 Published: 2023-02-07 Modified: 2026-06-17

Description

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.

Affected Platforms

Terra-Master F4-421Terra-Master F5-422Terra-Master F5-221Terra-Master T12-450Terra-Master U12-322-9100Terra-Master U16-722-2224Terra-Master U8-111Terra-Master U8-722-2224Terra-Master U8-322-9100Terra-Master U12-423

Weakness Type

CWE-306, CWE-306

References

http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-E…
https://forum.terra-master.com/en/viewforum.php?f=28
https://github.com/0xf4n9x/CVE-2022-24990
https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticate…
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33…
http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-E…