Known vulnerabilities in TOS

Vendor: TerraMaster
Software: TOS
Software CPE: cpe:2.3:a:terramaster:tos:*:*:*:*:*:*:*:*
Website: https://www.terra-master.com/uk/
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TOS TOS is affected by 8 known vulnerabilities: 1 critical, 2 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61402 - Command injection
CVE-2022-24990		 CWE-77 Critical
Available
Exploited
 4.2.31 16.03.2022 SB2022031606
#VU49688 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-28188		 CWE-78 High
Available
No
 4.2.07 24.12.2020 SB2020122414
#VU49690 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28184		 CWE-79 Low
No
No
 4.2.07 24.12.2020 SB2020122414
#VU49691 - Exposure of sensitive information to an unauthorized actor
CVE-2020-28185		 CWE-200 Medium
No
No
 4.2.07 24.12.2020 SB2020122414
#VU49692 - Weak password recovery mechanism
CVE-2020-28186		 CWE-640 Medium
No
No
 4.2.07 24.12.2020 SB2020122414
#VU49693 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-28187		 CWE-22 Medium
No
No
 4.2.07 24.12.2020 SB2020122414
#VU49694 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-28190		 CWE-300 Medium
No
No
 4.2.07 24.12.2020 SB2020122414
#VU49695 - Improper Access Control
CVE-2020-29189		 CWE-284 High
No
No
 4.2.07 24.12.2020 SB2020122414