Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) on the system as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/wapNasIPS endpoint.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TerraMaster TOS 安全漏洞
Vulnerability Description
TerraMaster TOS是中国铁威马（TerraMaster）公司的一款基于Linux平台的，专用于erraMaster云存储NAS服务器的操作系统。 TerraMaster TOS 存在安全漏洞，攻击者对 /module/api.php?mobile/wapNasIPS 端点执行请求利用该漏洞可以获取系统上设置的第一个管理员哈希以及 MAC 地址、内部 IP 地址等其他信息。以下产品和版本受到影响：Terramaster F4-210、F2-210 TOS 4.2.X (4.2.15-210714
CVSS Information
N/A
Vulnerability Type
N/A