TI-2021-12208 CVE-2021-32534 · GHSA-6mj8-ggv6-xhhj
QSAN SANOS - Command Injection
Priority MEDIUM 46
QSAN SANOS factory reset function does not filter special parameters.
QSAN
Records31All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
QSAN records in CISA KEVNo QSAN vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Sanos · all components
TI-2021-12207 CVE-2021-32533 · GHSA-rhmx-v42v-c5fh
QSAN SANOS - Command Injection
Priority MEDIUM 46
The QSAN SANOS setting page does not filter special parameters.
TI-2021-12203 CVE-2021-32529 · GHSA-9xhc-jrfx-j7h5
QSAN XEVO, SANOS - Command Injection -1
Priority MEDIUM 46
Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands.
TI-2021-12209 CVE-2021-32535 · GHSA-3h6m-3jhx-cfg9
QSAN SANOS - Use of Hard-coded Credentials
Priority MEDIUM 45
The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions.
TI-2021-12196 CVE-2021-32522 · GHSA-6p7h-4j4x-9m57
QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts
Priority MEDIUM 45
Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack.
TI-2021-12193 CVE-2021-32519 · GHSA-4qqf-xjmf-3h2v
QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort
Priority MEDIUM 44
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash.
TI-2021-12195 CVE-2021-32521 · GHSA-gfjp-9255-98gh
QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password
Priority MEDIUM 43
Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges.