QSAN

Products

ProductCVEsExploitedLatest
Storage Manager23–Jul 7, 2021
SANOS7–Jul 7, 2021
XEVO7–Jul 7, 2021
Storage Manager XN8008T1–Aug 2, 2021
Storage Manager XN8024R1–Aug 2, 2021

Exploited and recent CVEs

  • CVE-2021-37216 Medium 6.1 QSAN Storage Manager - Reflected Cross-Site Scripting 3.2%
  • CVE-2021-37216 Medium 6.1 QSAN Storage Manager - Reflected Cross-Site Scripting 3.2%
  • CVE-2021-32535 Critical 9.8 QSAN SANOS - Use of Hard-coded Credentials 1.4%
  • CVE-2021-32534 Critical 9.8 QSAN SANOS - Command Injection 1.9%
  • CVE-2021-32533 Critical 9.8 QSAN SANOS - Command Injection 1.9%
  • CVE-2021-32532 High 7.5 QSAN XEVO - Path Traversal 1.7%
  • CVE-2021-32531 Critical 9.8 QSAN XEVO - Command Injection Following via Init function 2.1%
  • CVE-2021-32530 Critical 9.8 QSAN XEVO - Command Injection Following via Array function 2.3%
  • CVE-2021-32529 Critical 9.8 QSAN XEVO, SANOS - Command Injection -1 2.3%
  • CVE-2021-32529 Critical 9.8 QSAN XEVO, SANOS - Command Injection -1 2.3%
  • CVE-2021-32528 Medium 5.3 QSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized Actor 1.1%
  • CVE-2021-32527 High 7.5 QSAN Storage Manager - Path Traversal-2 1.7%
  • CVE-2021-32526 Medium 6.5 QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource 0.9%
  • CVE-2021-32525 Critical 9.1 QSAN Storage Manager - Use of Hard-coded Password-2 1.7%
  • CVE-2021-32524 Critical 9.1 QSAN Storage Manager - Command Injection-3 1.7%
  • CVE-2021-32523 Critical 9.1 QSAN Storage Manager - Improper Authorization 1.5%
  • CVE-2021-32522 Critical 9.8 QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts 1.4%
  • CVE-2021-32522 Critical 9.8 QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts 1.4%
  • CVE-2021-32522 Critical 9.8 QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts 1.4%
  • CVE-2021-32521 High 7.3 QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password 0.7%
  • CVE-2021-32521 High 7.3 QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password 0.7%
  • CVE-2021-32521 High 7.3 QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password 0.7%
  • CVE-2021-32520 Critical 9.8 QSAN Storage Manager - Use of Hard-coded Cryptographic Key 1.0%
  • CVE-2021-32519 Critical 9.8 QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort 0.9%
  • CVE-2021-32519 Critical 9.8 QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort 0.9%
  • CVE-2021-32519 Critical 9.8 QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort 0.9%
  • CVE-2021-32518 High 7.5 QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following 1.7%
  • CVE-2021-32517 High 7.5 QSAN Storage Manager - Improper Access Control 1.3%
  • CVE-2021-32516 High 7.5 QSAN Storage Manager - Path Traversal 1.7%
  • CVE-2021-32515 Medium 5.3 QSAN Storage Manager - Exposure of Information Through Directory Listing 0.8%