CVE-2019-18384

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=*public*%25252Fadmin_OnlyRead.txt substring.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-10-23

Last modified

2024-08-05

Affected products

• Fs-210 Firmware (Terra-master)

References

• https://github.com/gusrmsdlrh/CVE-Reserved2/blob/master/README.md