PT-2018-11773
CVE-2018-13353
·
تاريخ النشر
2018-11-27
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TerraMaster TOS version 3.1.03
Description
The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute commands by manipulating the
checkport parameter.Recommendations
For TerraMaster TOS version 3.1.03, avoid using the
checkport parameter in the affected ajaxdata.php file until a patch is available. As a temporary workaround, consider restricting access to the ajaxdata.php file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾