Unrated severityNVD Advisory· Published Apr 25, 2022· Updated Aug 4, 2024
CVE-2021-45836
CVE-2021-45836
Description
An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by injecting a maliciously crafted input in the request through /tos/index.php?app/hand_app.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- thatsn0tmy.site/posts/2021/12/how-to-summon-rces/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.