An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation.Referenceshttps://github.com/gusrmsdlrh/CVE-2019-18195
