CVE-2021-32521

QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

CVSS 7.3 HIGHEPSS 0.7%CWE-259

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

QSAN · SANOS QSAN · Storage Manager QSAN · XEVO

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.twcert.org.tw/tw/cp-132-4877-7b696-1.html