Vulnerabilities in QSAN
31 resultsVexday analysis
A QSAN possui 31 vulnerabilidades documentadas, das quais 14 são críticas, porém nenhuma está sob ataque ativo no momento. A fraqueza dominante é injeção de comando (CWE-78), típica de produtos de armazenamento, e a ausência de divulgações recentes sugere que o risco atual é principalmente legado, requerendo atenção em ambientes com equipamentos QSAN desatualizados.
CVE-2021-32506MEDIUMQSAN Storage Manager - Absolute Path Traversal via GetImage functionEPSS 1.3%CVE-2021-32517HIGHQSAN Storage Manager - Improper Access ControlEPSS 1.3%CVE-2021-32514HIGHQSAN Storage Manager - Improper Access Control Following via FirwareUpgrade functionEPSS 1.2%CVE-2021-32528MEDIUMQSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized ActorEPSS 1.1%CVE-2021-32520CRITICALQSAN Storage Manager - Use of Hard-coded Cryptographic KeyEPSS 1.0%CVE-2021-32526MEDIUMQSAN Storage Manager - Incorrect Permission Assignment for Critical ResourceEPSS 0.9%CVE-2021-32510MEDIUMQSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus functionEPSS 0.9%CVE-2021-32511MEDIUMQSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList functionEPSS 0.9%CVE-2021-32519CRITICALQSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational EffortEPSS 0.9%CVE-2021-32515MEDIUMQSAN Storage Manager - Exposure of Information Through Directory ListingEPSS 0.8%CVE-2021-32521HIGHQSAN Storage Manager, XEVO, SANOS - Use of Hard-coded PasswordEPSS 0.7%