7.5

CVE-2021-30127

Exploit
TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but undocumented workaround.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Terra-master ≫ F2-210 Firmware Version <= 2021-04-03
   Terra-master ≫ F2-210 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.533
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.3 3.9 3.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://kn100.me/terramaster-nas-exposing-itself-over-upnp/
Third Party Advisory
Exploit
https://news.ycombinator.com/item?id=26681984
Third Party Advisory
Issue Tracking