TerraMaster

Vulnerability Description

Description: TerraMaster TOS V3.X.X-V4.1.X Password recovery function is defective.An attacker can receive a verification code by forging a mailbox, and can reset the administrator user password.

Vulnerability Name: TerraMaster TOS V3.X.X-V4.1.X Password recovery function is defective

Product Homepage: https://www.terra-master.com

Version: V3.X.X-V4.1.X

Vulnerability details

1.Password recovery URL: http://xx.xx.xx.xx:8181/wizard/getpass.php

2.return in the correct email address after filling in the username.

3.Open the packet capture and click Send Verification Code to change the admin's mailbox that correctly receives the verification code to a fake mailbox.

4.Successfully received the correct verification code。

5.Submit a new password and submit a request for modification.

6.Password modification request submitted successfully。

7.Successful login system.