TI-2021-12206 CVE-2021-32532 · GHSA-8qpp-9h5v-3cfj
QSAN XEVO - Path Traversal
Priority LOW 36
Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions.
Vulnerabilities
6 records
TI-2021-12205 CVE-2021-32531 · GHSA-qrmg-m8r6-9cvr
QSAN XEVO - Command Injection Following via Init function
Priority MEDIUM 46
OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions.
TI-2021-12203 CVE-2021-32529 · GHSA-9xhc-jrfx-j7h5
QSAN XEVO, SANOS - Command Injection -1
Priority MEDIUM 46
Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands.
TI-2021-12196 CVE-2021-32522 · GHSA-6p7h-4j4x-9m57
QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts
Priority MEDIUM 45
Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack.
TI-2021-12195 CVE-2021-32521 · GHSA-gfjp-9255-98gh
QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password
Priority MEDIUM 43
Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges.
TI-2021-12193 CVE-2021-32519 · GHSA-4qqf-xjmf-3h2v
QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort
Priority MEDIUM 44
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash.