CVE-2022-24990β€”TerraMaster OS Remote Command Execution Vulnerability

PUBLISHEDvulnerability record
2023-02-10 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-24990
Project:
TerraMaster
Product:
TerraMaster OS
Date Added:
2023-02-10
Due Date:
2023-03-03
Last Updated:
June 21, 2025

Vulnerability Name

TerraMaster OS Remote Command Execution Vulnerability

Description

TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://forum.terra-master.com/en/viewtopic.php?t=3030
  • https://nvd.nist.gov/vuln/detail/CVE-2022-24990

Related Weaknesses

browse all CVEs