NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC ×21

CVE-2020-28188

CVSS 3.1: 9.8 critical
EPSS: 96%p100
Published: Dec 24, 2020 · Dec 24, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-28188 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php in Event parameter.

Vendors: terra-master

Products: tos

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.4%)

In the news

7 stories

Network Attack Trends: Internet of Threats (November 2020

Palo Alto Unit 42Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoCExploitedCVE-2020-28188 CVE-2020-17519 CVE-2020-29227+621

60

Attackers Are Taking Advantage of the Open-Source Service Interactsh for Malicious Purposes

Palo Alto Unit 42Jun 6, 01:14 UTC · Jun 6, 2024Exploit / PoCCVE-2017-9506 CVE-2017-12629 CVE-2019-2767+233

60

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

The Hacker NewsMay 24, 05:00 UTC · May 24, 2024VulnerabilityExploitedCVE-2020-17519 CVE-2020-28188 CVE-2020-292271

60

Necro botnet now targets Visual Tools DVRs

Security AffairsOct 12, 22:48 UTC · Oct 12, 2021MalwareExploitedCVE-2020-15568 CVE-2021-2900 CVE-2020-25494+21

60

Threat actors are attempting to exploit the CVE-2021-22986 flaw in F5 BIG

Security AffairsMar 19, 21:47 UTC · Mar 19, 2021VulnerabilityExploitedCVE-2021-22986 CVE-2020-281882 · 2 reads

60

FreakOut! Ongoing Botnet Attack Exploiting Recent Linux Vulnerabilities

The Hacker NewsJan 19, 13:40 UTC · Jan 19, 2021VulnerabilityCVE-2020-28188 CVE-2021-3007 CVE-2020-79612 · 1 read

60

FreakOut botnet target 3 recent flaws to compromise Linux devices

Security AffairsOct 12, 22:18 UTC · Oct 12, 2021MalwareCVE-2020-28188 CVE-2021-3007 CVE-2020-79612 · 1 read

47