Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8vhf-89h2-fwh8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP). Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates.

TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP). Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates.

EPSS

Процентиль: 47%
0.00241
Низкий

Связанные уязвимости

CVSS3: 5.9
nvd
около 5 лет назад

TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP). Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates.

EPSS

Процентиль: 47%
0.00241
Низкий