Vulnerabilities > Qsan > Storage Manager > High

DATE CVE VULNERABILITY TITLE RISK
2021-07-07 CVE-2021-32512 OS Command Injection vulnerability in Qsan Storage Manager
QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands.
network
low complexity
qsan CWE-78
7.5
2021-07-07 CVE-2021-32513 OS Command Injection vulnerability in Qsan Storage Manager
QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands.
network
low complexity
qsan CWE-78
7.5
2021-07-07 CVE-2021-32520 Use of Hard-coded Cryptographic Key vulnerability in Qsan Storage Manager
Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions.
network
low complexity
qsan CWE-321
7.5
2021-07-07 CVE-2021-32521 Use of Hard-coded Credentials vulnerability in Qsan Sanos, Storage Manager and Xevo
Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges.
network
low complexity
qsan CWE-798
7.5