Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: QSAN Component: Xevo Clear all filters
TI-2021-12206 CVE-2021-32532 · GHSA-8qpp-9h5v-3cfj

QSAN XEVO - Path Traversal

Priority LOW 36

Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01669 Published 2021-07-07 Fixed in 1.2.0 CWE-22
TI-2021-12205 CVE-2021-32531 · GHSA-qrmg-m8r6-9cvr

QSAN XEVO - Command Injection Following via Init function

Priority MEDIUM 46

OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02058 Published 2021-07-07 Fixed in 1.2.0 CWE-78
TI-2021-12204 CVE-2021-32530 · GHSA-whm9-h873-f559

QSAN XEVO - Command Injection Following via Array function

Priority MEDIUM 46

OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02309 Published 2021-07-07 No fix listed CWE-78
TI-2021-12203 CVE-2021-32529 · GHSA-9xhc-jrfx-j7h5

QSAN XEVO, SANOS - Command Injection -1

Priority MEDIUM 46

Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02264 Published 2021-07-07 Fixed in 1.2.0 CWE-77
TI-2021-12195 CVE-2021-32521 · GHSA-gfjp-9255-98gh

QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

Priority MEDIUM 43

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00715 Published 2021-07-07 Fixed in 1.2.0 CWE-259