Search vulnerabilities

Results 3

Export CSV
CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
CVE-2019-18384

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=*public*%25252Fadmin_OnlyRead.txt substring.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2019-18383

An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramaster_TNAS-00E43A_config_backup.bin without permission.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors