CVE-2022-24990

Published: 2023-02-07T18:15Z

Last Modified: 2025-04-03T18:54Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt