Qsan Xevo — known CVE vulnerabilities

Every CVE whose affected-product data names Qsan Xevo, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-32529 — CVSS 9.8 (critical): Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest…
• CVE-2021-32530 — CVSS 9.8 (critical): OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via…
• CVE-2021-32531 — CVSS 9.8 (critical): OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions…
• CVE-2021-32522 — CVSS 9.8 (critical): Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to…
• CVE-2021-32519 — CVSS 9.8 (critical): Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to…
• CVE-2021-32532 — CVSS 7.5 (high): Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without…
• CVE-2021-32521 — CVSS 7.3 (high): Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest…