Vulnerabilities > Qsan > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-07-07 | CVE-2021-32512 | OS Command Injection vulnerability in Qsan Storage Manager QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. | 7.5 |
| 2021-07-07 | CVE-2021-32513 | OS Command Injection vulnerability in Qsan Storage Manager QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. | 7.5 |
| 2021-07-07 | CVE-2021-32520 | Use of Hard-coded Cryptographic Key vulnerability in Qsan Storage Manager Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. | 7.5 |
| 2021-07-07 | CVE-2021-32521 | Use of Hard-coded Credentials vulnerability in Qsan Sanos, Storage Manager and Xevo Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. | 7.5 |
| 2021-07-07 | CVE-2021-32529 | Command Injection vulnerability in Qsan Sanos and Xevo Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. | 7.5 |
| 2021-07-07 | CVE-2021-32530 | OS Command Injection vulnerability in Qsan Xevo 1.2.0 OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. | 7.5 |
| 2021-07-07 | CVE-2021-32531 | OS Command Injection vulnerability in Qsan Xevo 1.2.0 OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions. | 7.5 |
| 2021-07-07 | CVE-2021-32533 | OS Command Injection vulnerability in Qsan Sanos 2.0.0 The QSAN SANOS setting page does not filter special parameters. | 7.5 |
| 2021-07-07 | CVE-2021-32534 | OS Command Injection vulnerability in Qsan Sanos 2.0.0 QSAN SANOS factory reset function does not filter special parameters. | 7.5 |
| 2021-07-07 | CVE-2021-32535 | Use of Hard-coded Credentials vulnerability in Qsan Sanos 2.0.0 The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions. | 7.5 |