CVE-2021-32521CWE-259

QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

High · published July 7, 2021

CVSS v3.1
7.3
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00715 · 53.2th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2021-07-07T14:12Z
EPSS history
Timeline
  • 07 JUL 14:12Z
    QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password
    cvelistv5