{"cvss":0.0,"datePublished":"2021-10-11T00:00:00Z","dateUpdated":"2021-10-11T00:00:00Z","description":"TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter.","dueDate":"","id":"CVE-2020-15568","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"tos","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"TerraMaster tos Improper Control of Dynamically-Managed Code Resources","vendor":"TerraMaster"}