CVE-2020-28190

TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP)

published December 24, 2020

CVSS
—
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP). Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00787 · 55.7th percentile
Published
2020-12-24T14:34Z
EPSS history
Timeline
  • 24 DEC 14:34Z
    TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP)
    cvelistv5