CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring.
References
Link Resource
https://github.com/gusrmsdlrh/CVE-Reserved3/blob/master/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:terra-master:fs-210_firmware:4.0.19:*:*:*:*:*:*:*
cpe:2.3:h:terra-master:fs-210:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-10-23 21:15

Updated : 2023-12-10 13:13


NVD link : CVE-2019-18385

Mitre link : CVE-2019-18385

CVE.ORG link : CVE-2019-18385


JSON object : View

Products Affected

terra-master

  • fs-210
  • fs-210_firmware
CWE
CWE-532

Insertion of Sensitive Information into Log File