7.5
CVE-2021-30127
- EPSS 0.24%
- Veröffentlicht 03.04.2021 18:15:11
- Zuletzt bearbeitet 21.11.2024 06:03:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginTerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but undocumented workaround.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Terra-master ≫ F2-210 Firmware Version <= 2021-04-03
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.464 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.3 | 3.9 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|