CVE-2024-34539

Summary

Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. These credentials can also be used to login to the administration panel and to perform privileged actions.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• https://shinnai.altervista.org/exploits/SH-20240611-CVE-2024-34539.html

References

• https://shinnai.altervista.org/exploits/SH-20240611-CVE-2024-34539.html

• ←Previous
• Next→