An issue exists on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation.
terra-master f2-210_firmware 4.0.19