CVE-2024-34539

Published: Jun 14, 2024Modified: Jun 17, 2026Deferred

9.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Exploitability: 3.9 / Impact: 5.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. These credentials can also be used to login to the administration panel and to perform privileged actions.

Related CWEs

CWE-259

Use of Hard-coded Password

The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

References (2)

https://shinnai.altervista.org/exploits/SH-20240611-CVE-2024-34539.html

Source: cve@mitre.org

https://shinnai.altervista.org/exploits/SH-20240611-CVE-2024-34539.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.