Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2022-24990

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-24990.

Coverage Span: 2022-03-07
Reports: 1 related reports

Associated Reports & Timeline

CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation

Octagon Networks' chain on TerraMaster TOS 4.2.29: a PHP object instantiation bug plus a signing-check bypass yields unauthenticated remote root command execution on NAS devices.