CVE-2020-15568

highpriority · attend · 59EPSS 0.290 · 98 %ileexploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · PoC

Likely / severe?

29.0% (98th) EPSS

CVSS 10 · high

Is it mine?

2 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9.8–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-913USprimary

exploits (2)

Public proof-of-concept and weaponised exploit code.

divinepwner/TerraMaster-TOS-CVE-2020-15568Repository for CVE-2020-15568 Metasploit modulePoC · poc_in_github
n0bugz/CVE-2020-15568A quick and easy POC for CVE-2020-15568PoC · poc_in_github

affected products (2)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
terra-master tos< 4.1.29nvdUScpe:2.3:o:terra-master:tos:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2021-01-30modified 2026-06-17

related (274)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-68613US	high8.8OT critical	99.0% (100th)	KEV	2025-12-19
n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnera…
CVE-2023-43177US	critical9.8	81.8% (100th)	Exploit	2023-11-18
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
CVE-2023-50386US	high8.8	83.7% (100th)	Exploit	2024-02-09
Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in A…
CVE-2023-29017US	critical9.8	63.2% (99th)	Exploit	2023-04-06
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to `Error.prepareS…
CVE-2022-36067US	critical10.0	47.9% (99th)	Exploit	2022-09-06
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gai…

+269 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan