Vulnerabilities (CVE)

Filtered by vendor Terra-master Subscribe
Filtered by product Fs-210
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-18385 1 Terra-master 2 Fs-210, Fs-210 Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring.
CVE-2019-18384 1 Terra-master 2 Fs-210, Fs-210 Firmware 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=*public*%25252Fadmin_OnlyRead.txt substring.
CVE-2019-18383 1 Terra-master 2 Fs-210, Fs-210 Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramaster_TNAS-00E43A_config_backup.bin without permission.