CVE-2022-24990VulnerabilityPublished 02/10/2023Updated 10/24/2026
CVE-2022-24990: TerraMaster OS Remote Command Execution Vulnerability
Affects TerraMaster TerraMaster OSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 02/10/2023
- KEV deadline
- 03/03/2023
- Ransomware
- Used in ransomware campaigns
- EPSS
- 83.2% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.