CVE-2017-9328

Critical

Published: 15/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-9328 describes a shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before version 3.0.34, leading to remote code execution as root.

Risk Assessment

This vulnerability allows attackers to execute code remotely with administrator privileges, potentially leading to full system compromise.

Recommendation

It is recommended to update TerraMaster TOS to version 3.0.34 or later to mitigate this vulnerability.

Original NVD description (English source)

Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.