CVE-2017-9328: TerraMaster Operating System

Critical severity, CVSS 9.8. EPSS: 7.4% chance of exploitation in the next 30 days.

Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.

Affected products

• TerraMaster TerraMaster Operating System: up to and including 3.0.33

Published 2017-09-15. Last modified 2026-06-17.