Qsan Sanos — known CVE vulnerabilities

Every CVE whose affected-product data names Qsan Sanos, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-32529 — CVSS 9.8 (critical): Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest…
• CVE-2021-32535 — CVSS 9.8 (critical): The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s…
• CVE-2021-32522 — CVSS 9.8 (critical): Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to…
• CVE-2021-32519 — CVSS 9.8 (critical): Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to…
• CVE-2021-32533 — CVSS 9.8 (critical): The QSAN SANOS setting page does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary…
• CVE-2021-32534 — CVSS 9.8 (critical): QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute…
• CVE-2021-32521 — CVSS 7.3 (high): Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest…