CVE-2021-32534: critical vulnerability in QSAN SANOS
QSAN SANOS - Command Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.9%
In short
QSAN SANOS storage systems have a factory reset function that doesn't properly filter user input, allowing attackers to inject and run unauthorized commands on the device without needing special permissions.
Technical detail
CWE-78 command injection in the factory reset endpoint allows unauthenticated remote attackers to execute arbitrary OS commands by supplying malicious parameters; no input validation or sanitization is performed on the reset function parameters, resulting in complete system compromise.
Summary generated and translated by AI from the official description.
QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
QSAN · SANOSRelated CVEs — QSAN SANOS
In the same product, most dangerous first.
CVE-2021-32529CRITICALQSAN XEVO, SANOS - Command Injection -1EPSS 2.3%CVE-2021-32533CRITICALQSAN SANOS - Command InjectionEPSS 1.9%CVE-2021-32535CRITICALQSAN SANOS - Use of Hard-coded CredentialsEPSS 1.4%CVE-2021-32522CRITICALQSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication AttemptsEPSS 1.4%CVE-2021-32519CRITICALQSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational EffortEPSS 0.9%CVE-2021-32521HIGHQSAN Storage Manager, XEVO, SANOS - Use of Hard-coded PasswordEPSS 0.7%