Vulnerabilities > CVE-2020-15568 - Improper Control of Dynamically-Managed Code Resources vulnerability in Terra-Master TOS
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 10 |