CVE-2021-32521 HIGH

CVE-2021-32521: QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

Vendor Qsan
Product Storage Manager
Weakness CWE-259
Published July 7, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Key dates

02Disclosure timeline

July 7, 2021 CVE published
September 16, 2024 Record updated