TerraMaster TOS 4.2.15 or lower - RCE chain from unauthenticated to root via session crafting.

MetasploitMetasploit exploitRubyexploit_linux/http/terramaster_unauth_rce_cve_2021_45837

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

Metasploit

Linked vulnerabilities

3