Skip to content
OpenAdvisories

Vendor

QSAN

31 known vulnerabilities.

Products

Storage Manager 23 XEVO 7 SANOS 7 Storage Manager XN8008T 1 Storage Manager XN8024R 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2021-32532

    QSAN XEVO - Path Traversal

    Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.

    QSAN XEVO
  • High 7.5
    CVE-2021-32527

    QSAN Storage Manager - Path Traversal-2

    Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download function. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

    QSAN Storage Manager
  • High 7.3
    CVE-2021-32521

    QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

    Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

    QSAN Storage Manager SANOS XEVO
  • High 7.5
    CVE-2021-32518

    QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following

    A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

    QSAN Storage Manager
  • High 7.5
    CVE-2021-32517

    QSAN Storage Manager - Improper Access Control

    Improper access control vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storag…

    QSAN Storage Manager
  • High 7.5
    CVE-2021-32516

    QSAN Storage Manager - Path Traversal

    Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

    QSAN Storage Manager
  • High 7.5
    CVE-2021-32514

    QSAN Storage Manager - Improper Access Control Following via FirwareUpgrade function

    Improper access control vulnerability in FirmwareUpgrade in QSAN Storage Manager allows remote attackers to reboot and discontinue the device. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

    QSAN Storage Manager