PatchTheCVEterra-master vulnerabilities
Recent CVEs affecting terra-master products. 2 tracked.
terra-master has 2 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2023-08-20. Highest priority: CVE-2022-24990 (score 94/100).
- CVE-2022-24990 HIGH 7.5 EXPLOITED UPGRADE TerraMaster OS Remote Command Execution Vulnerability
- CVE-2022-24989 CRITICAL 9.8 UPGRADE TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype
FAQ
How do I fix terra-master vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is terra-master being exploited right now?
Yes: 1 terra-master CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which terra-master CVE should I patch first?
CVE-2022-24990 currently ranks highest (94/100): TerraMaster OS Remote Command Execution Vulnerability.