Replication-Abuse

TossUp — TerraMaster TOS Unauthenticated Redis Root RCE + NFS LPE

TossUp is a pair of bugs against TerraMaster TOS NAS devices. The primary issue is that Redis 4.0.10 runs as root and listens on 0.0.0.0:6379 with no authentication — despite /etc/redis.conf containing bind 127.0.0.1, the init script starts Redis as…