CVEvulnerability

CVE-2021-32521

9.8 CRITICAL Published 2021-07-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-259, CWE-798

Description

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Affected configurations

• qsan sanos (<= 2.0.0) • qsan storage manager (<= 3.3.1) • qsan xevo (< 1.2.0)

Related

Weakness · CWE (2)

  • CWE-259 Use of Hard-coded Password weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References