by Kastro
Paper/Archive/CVE-2021-32531

CVE-2021-32531

QSAN XEVO — QSAN XEVO - Command Injection Following via Init function

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 81.3.813 × 2016.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.

Affected

ProductAffectedFixed inSource
XEVOunspecified – < 1.2.01.2.0CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-4887-ee5e3-1.html