CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 10.2% probability of exploitation in the next 30 days.
CVE
CVE-2018-13338
Severity
CRITICAL
CVSS
9.8
EPSS
10.23%
Original NVD Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)