EDB-49330

PoC

TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution (Metasploit)

view exploit source exploit_dbtype webappsauthor AkkuSpublished 2020-12-23catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-35665US	critical9.8	78.5% (100th)	Exploit	2020-12-23
An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creati…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.