漏洞描述
TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
octagon.nethttps://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation/↗www.broadcom.comhttps://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33732↗forum.terra-master.comhttps://forum.terra-master.com/en/viewforum.php?f=28↗packetstormsecurity.comhttp://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-Execution.html↗