New assessment for topic: CVE-2022-24990

Topic description: "TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response. ..."

"A July 2024 bulletin from multiple U.S ..."

Link: https://attackerkb.com/assessments/365cd645-8444-4197-af8b-f95c62d0a983