Skip to content
Brand AI

TERRAMASTER

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile1 entries

  1. 2022

    TerraMaster NAS Exposed to Unauthenticated Remote Command Execution Vulnerability, Hit by DeadBolt Ransomware

    In 2022, TerraMaster TOS 4.2.29 was found to have an unauthenticated remote command execution vulnerability (CVE-2022-24990), which was exploited in DeadBolt ransomware attacks, encrypting and demanding ransom for large amounts of user NAS data. TerraMaster released the TOS 4.2.31 patch and said no decryption method had yet been found, recommending users upgrade and disable UPnP and remote services. Users on the official forum questioned the company's early insufficient explanation of attack paths, remediation details, and recovery plans. Progress: media reports. Entity involved: Shenzhen TerraMaster Technology Co., Ltd. Scope: NAS users of the TerraMaster TOS system.

    Source