The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-4881-959d3-1.html | Third Party Advisory |
Configurations
History
20 Sep 2021, 12:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-259 |
22 Jul 2021, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. |
10 Jul 2021, 03:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://www.twcert.org.tw/tw/cp-132-4881-959d3-1.html - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 9.0
v3 : 7.2 |
| CWE | CWE-798 | |
| CPE | cpe:2.3:a:qsan:storage_manager:*:*:*:*:*:*:*:* |
07 Jul 2021, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-07 14:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-32525
Mitre link : CVE-2021-32525
CVE.ORG link : CVE-2021-32525
JSON object : View
Products Affected
qsan
- storage_manager