{"cvss":0.0,"datePublished":"2021-01-19T00:00:00Z","dateUpdated":"2021-01-19T00:00:00Z","description":"Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php in Event parameter.","dueDate":"","id":"CVE-2020-28188","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"tos","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"TerraMaster tos Improper Neutralization of Special Elements used in an OS Command","vendor":"TerraMaster"}