PT-2018-11773
CVE-2018-13353
·
Published
2018-11-27
·
Updated
2019-10-03
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TerraMaster TOS version 3.1.03
Description
The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute commands by manipulating the
checkport parameter.Recommendations
For TerraMaster TOS version 3.1.03, avoid using the
checkport parameter in the affected ajaxdata.php file until a patch is available. As a temporary workaround, consider restricting access to the ajaxdata.php file to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾