Lucene search

[email protected]NVD:CVE-2021-32519

HistoryJul 07, 2021 - 2:15 p.m.

CVE-2021-32519

2021-07-0714:15:11

CWE-916

[email protected]

web.nvd.nist.gov

qsan

weak password hashing

remote attackers

md5

brute-force

plain-text password

vulnerability fix

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.004

Percentile

72.8%

JSON

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.

Affected configurations

Nvd

Node

qsansanosRange<2.1.0

qsanstorage_managerRange<3.3.2

qsanxevoRange<2.1.0

VendorProductVersionCPE
qsansanos*cpe:2.3:a:qsan:sanos:*:*:*:*:*:*:*:*
qsanstorage_manager*cpe:2.3:a:qsan:storage_manager:*:*:*:*:*:*:*:*
qsanxevo*cpe:2.3:a:qsan:xevo:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qsan	sanos	*	cpe:2.3:a:qsan:sanos::::::::
qsan	storage_manager	*	cpe:2.3:a:qsan:storage_manager::::::::
qsan	xevo	*	cpe:2.3:a:qsan:xevo::::::::

References

www.twcert.org.tw/tw/cp-132-4875-692f0-1.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.004

Percentile

72.8%

JSON

Related for NVD:CVE-2021-32519

prion1 cve1 cvelist1