CVE-2020-28185
45Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 18%
from disclosure to weapon
Published on NVDDec 24
VulnCheck+1061d
exploitation probability
18%top 3% of all CVEs
observed exploitation
yesVulnCheck
User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php.
Affected products
n/a · n/a