Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-32522 EUVD-2021-19368GHSA-6p7h-4j4x-9m57

QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts

Published Jul 7, 2021 · Updated Sep 16, 2024 · Assigned by twcert

Description

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Affected products

VendorProductAffectedFixed
QSAN Storage Manager unspecified – ≤ 3.3.1 —
QSAN XEVO unspecified – < 1.2.0 1.2.0
QSAN SANOS unspecified – ≤ 2.0.0 —

References