{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-27T08:53:00.342","vulnerabilities":[{"cve":{"id":"CVE-2022-24990","sourceIdentifier":"cve@mitre.org","published":"2023-02-07T18:15:09.100","lastModified":"2026-06-17T04:32:54.773","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending \"User-Agent: TNAS\" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response."},{"lang":"es","value":"TerraMaster NAS 4.2.29 y versiones anteriores permiten a atacantes remotos descubrir la contraseña administrativa enviando \"User-Agent: TNAS\" a module/api.php?mobile/webNasIPS y luego leyendo el campo PWD en la respuesta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-12-22T05:01:00.715241Z","id":"CVE-2022-24990","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-02-10","cisaActionDue":"2023-03-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"TerraMaster OS Remote Command Execution Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:terra-master:terramaster_operating_system:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2.31","matchCriteriaId":"A0AE9591-B8DA-4A95-9734-1A58B95BB227"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f2-210:-:*:*:*:*:*:*:*","matchCriteriaId":"A084599C-E4D9-4EC5-8103-68CDBB3604CF"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f2-221:-:*:*:*:*:*:*:*","matchCriteriaId":"EAEF4467-F859-45E8-8171-54350D7D53BB"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f2-223:-:*:*:*:*:*:*:*","matchCriteriaId":"CB1C4291-64C7-4DCB-87A7-EE6A40146406"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f2-422:-:*:*:*:*:*:*:*","matchCriteriaId":"B42338B7-B6C2-49ED-AF3B-6815317884FD"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f2-423:-:*:*:*:*:*:*:*","matchCriteriaId":"67EF611C-748C-4CB0-902B-1966B6C6A7AA"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f4-421:-:*:*:*:*:*:*:*","matchCriteriaId":"3EDED618-8CF9-41C0-942F-9F5D002BE03E"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f4-422:-:*:*:*:*:*:*:*","matchCriteriaId":"402856F7-D66E-4C49-9F32-384AE7A05C7A"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f4-423:-:*:*:*:*:*:*:*","matchCriteriaId":"54A2F40A-F7B2-4B90-90A5-130533778329"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f5-221:-:*:*:*:*:*:*:*","matchCriteriaId":"D062C23E-2584-41EE-B1CC-BDC95E59B914"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:f5-422:-:*:*:*:*:*:*:*","matchCriteriaId":"1681757B-8E75-4B6A-838B-552B0BDC5EFE"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:t12-423:-:*:*:*:*:*:*:*","matchCriteriaId":"3A349FBD-BC5E-4024-AD39-328B32F60926"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:t12-450:-:*:*:*:*:*:*:*","matchCriteriaId":"55C15FCA-8926-42B7-9281-9F1EF7DC87DB"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:t6-423:-:*:*:*:*:*:*:*","matchCriteriaId":"E71B3D05-9532-4B1E-B396-E9FFB3A18293"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:t9-423:-:*:*:*:*:*:*:*","matchCriteriaId":"1A27209E-7A2A-45BA-AF03-4B7EEBD8F1D1"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:t9-450:-:*:*:*:*:*:*:*","matchCriteriaId":"1FFE2A59-4247-463E-B5C5-056C340F96E3"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u12-322-9100:-:*:*:*:*:*:*:*","matchCriteriaId":"BFC50AFC-D452-44C6-ABF9-8E38031F63BB"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u12-423:-:*:*:*:*:*:*:*","matchCriteriaId":"AEF38923-3F6B-4115-9574-42A5916E4A86"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u12-722-2224:-:*:*:*:*:*:*:*","matchCriteriaId":"8C1070B1-DACC-4A1F-BC42-F7915CF61E53"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u16-322-9100:-:*:*:*:*:*:*:*","matchCriteriaId":"40A6B355-0AD1-4591-81D5-CDB020340D5E"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u16-722-2224:-:*:*:*:*:*:*:*","matchCriteriaId":"49C9AB29-58C3-4005-86B4-A31CE157DD8D"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u24-722-2224:-:*:*:*:*:*:*:*","matchCriteriaId":"540EC60C-3285-4BFD-A617-14646988D361"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u4-111:-:*:*:*:*:*:*:*","matchCriteriaId":"C0E959DF-601B-4561-BC18-753A0C5FB13C"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u4-211:-:*:*:*:*:*:*:*","matchCriteriaId":"18A93A74-C8B7-4146-A3FF-8B3678FBD5B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u4-423:-:*:*:*:*:*:*:*","matchCriteriaId":"9220B428-CAF9-4EC1-92FB-FA81592D191C"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u8-111:-:*:*:*:*:*:*:*","matchCriteriaId":"5125FD8D-9EC9-4B5C-9CB3-E3ADE59A7CB1"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u8-322-9100:-:*:*:*:*:*:*:*","matchCriteriaId":"8982E486-A1D5-411D-85D1-20E5A3DB8192"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u8-423:-:*:*:*:*:*:*:*","matchCriteriaId":"3491C51B-83EB-4D50-9B41-7E1F2B7A63AB"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u8-522-9400:-:*:*:*:*:*:*:*","matchCriteriaId":"47377993-E503-44F4-92C6-4B57A3E280B2"},{"vulnerable":false,"criteria":"cpe:2.3:h:terra-master:u8-722-2224:-:*:*:*:*:*:*:*","matchCriteriaId":"39231C4D-8F9E-4A21-A5D9-F5DED81A6E00"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://forum.terra-master.com/en/viewforum.php?f=28","source":"cve@mitre.org","tags":["Issue Tracking","Release Notes"]},{"url":"https://github.com/0xf4n9x/CVE-2022-24990","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33732","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://forum.terra-master.com/en/viewforum.php?f=28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Release Notes"]},{"url":"https://github.com/0xf4n9x/CVE-2022-24990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24990","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}