Vulnerabilidades en QSAN

31 resultados
Análisis Vexday

A QSAN possui 31 vulnerabilidades documentadas, das quais 14 são críticas, porém nenhuma está sob ataque ativo no momento. A fraqueza dominante é injeção de comando (CWE-78), típica de produtos de armazenamento, e a ausência de divulgações recentes sugere que o risco atual é principalmente legado, requerendo atenção em ambientes com equipamentos QSAN desatualizados.

CVE-2021-37216MEDIUMQSAN Storage Manager - Reflected Cross-Site ScriptingEPSS 3.2%CVE-2021-32530CRITICALQSAN XEVO - Command Injection Following via Array functionEPSS 2.3%CVE-2021-32529CRITICALQSAN XEVO, SANOS - Command Injection -1EPSS 2.3%CVE-2021-32512CRITICALQSAN Storage Manager - Command Injection Following via QuickInstall functionEPSS 2.1%CVE-2021-32513CRITICALQSAN Storage Manager - Command Injection Following via QsanTorture functionEPSS 2.1%CVE-2021-32531CRITICALQSAN XEVO - Command Injection Following via Init functionEPSS 2.1%CVE-2021-32533CRITICALQSAN SANOS - Command InjectionEPSS 1.9%CVE-2021-32534CRITICALQSAN SANOS - Command InjectionEPSS 1.9%CVE-2021-32527HIGHQSAN Storage Manager - Path Traversal-2EPSS 1.7%CVE-2021-32524CRITICALQSAN Storage Manager - Command Injection-3EPSS 1.7%CVE-2021-32525CRITICALQSAN Storage Manager - Use of Hard-coded Password-2EPSS 1.7%CVE-2021-32532HIGHQSAN XEVO - Path TraversalEPSS 1.7%CVE-2021-32518HIGHQSAN Storage Manager - UNIX Symbolic Link (Symlink) FollowingEPSS 1.7%CVE-2021-32516HIGHQSAN Storage Manager - Path TraversalEPSS 1.7%CVE-2021-32523CRITICALQSAN Storage Manager - Improper AuthorizationEPSS 1.5%CVE-2021-32535CRITICALQSAN SANOS - Use of Hard-coded CredentialsEPSS 1.4%CVE-2021-32522CRITICALQSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication AttemptsEPSS 1.4%CVE-2021-32509MEDIUMQSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc functionEPSS 1.3%CVE-2021-32507MEDIUMQSAN Storage Manager - Absolute Path Traversal via FileDownload functionEPSS 1.3%CVE-2021-32508MEDIUMQSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming functionEPSS 1.3%