by Kastro
Paper/Archive/CVE-2021-32520

CVE-2021-32520

QSAN Storage Manager — QSAN Storage Manager - Use of Hard-coded Cryptographic Key

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.7.637 × 2012.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Affected

ProductAffectedFixed inSource
Storage Managerunspecified – 3.3.1–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-4876-8da07-1.html