Loading
Generated remediation guidance and an executive summary. No account required.
TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter.
Use CWE-913, Terra-Master vendor hub and Tos product page to widen CVE-2020-15568 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2021-45840, CVE-2021-45837 and CVE-2020-28188 for nearby disclosures in the same product family.