CVE-2021-32519criticalCWE-916

CVE-2021-32519: falha crítica em QSAN Storage Manager

QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Storage Manager+ Monitorar SANOS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.9%
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
QSAN · SANOSQSAN · Storage ManagerQSAN · XEVO
CVEs relacionadas — QSAN Storage Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2021-32530CRITICALQSAN XEVO - Command Injection Following via Array functionEPSS 2.3%CVE-2021-32529CRITICALQSAN XEVO, SANOS - Command Injection -1EPSS 2.3%CVE-2021-32513CRITICALQSAN Storage Manager - Command Injection Following via QsanTorture functionEPSS 2.1%CVE-2021-32512CRITICALQSAN Storage Manager - Command Injection Following via QuickInstall functionEPSS 2.1%CVE-2021-32531CRITICALQSAN XEVO - Command Injection Following via Init functionEPSS 2.1%CVE-2021-32534CRITICALQSAN SANOS - Command InjectionEPSS 1.9%