QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A directory traversal vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and earlier versions, which can be exploited by an attacker with normal user privileges to traverse file...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A directory traversal vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and earlier versions, which can be exploited by an attacker to traverse files in an arbitrary directory...

QSAN Storage Manager 后置链接漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A path traversal vulnerability exists in FileStreaming in QSAN Storage Manager 3.3.1 and earlier versions. An attacker can exploit this vulnerability by injecting symbolic links to access arbitrary files...

PT-2021-19753

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager affected versions not specified Description: A path traversal issue in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files by injecting a file path in the download function...

QSAN Storage Manager 操作系统命令注入漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. QSAN Storage Manager suffers from an operating system command injection vulnerability that can be exploited by remote attackers to execute arbitrary commands...

CVE-2021-32510: Exposure of Information Through Directory Listing

QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

QSAN Storage Manager 操作系统命令注入漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A command injection vulnerability exists in QSAN Storage Manager 3.3.1 and earlier versions. The vulnerability stems from QuickInstall failing to properly filter special parameters. A remote,...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An improper access control vulnerability exists in sharelink in QSAN Storage Manager 3.3.1 and earlier versions. A remote attacker could exploit this vulnerability to download arbitrary files via specific...

PT-2021-19752

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager affected versions not specified Description: The issue is related to an incorrect permission assignment for a critical resource in QSAN Storage Manager, allowing authenticated remote attackers to access arbitrary password...

PT-2021-19738

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: The issue is related to the QsanTorture component in QSAN Storage Manager, which fails to properly filter special parameters. This allows remote unauthenticated attackers to inject and...

PT-2021-19734 · Qsan · Qsan Storage Manager

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: The issue allows remote authenticated attackers to access arbitrary files by injecting a Symbolic Link following the Url path parameter in the FileviewDoc component of QSAN Storage...

QSAN Storage Manager 后置链接漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An absolute path traversal vulnerability exists in FileviewDoc in QSAN Storage Manager 3.3.1 and earlier versions. An attacker can exploit this vulnerability by injecting symbolic links to access arbitrar...

CVE-2021-32518: UNIX Symbolic Link (Symlink) Following

A vulnerability in sharelink in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-32511: Exposure of Information Through Directory Listing

QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-32512: Improper Neutralization of Special Elements used in an OS Command

QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-32516: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

PT-2021-19748

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager, XEVO, SANOS affected versions not specified Description: The issue is related to an improper restriction of excessive authentication attempts, allowing remote attackers to discover users' credentials and obtain access vi...

PT-2021-19744

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.2 QSAN XEVO versions prior to 2.1.0 QSAN SANOS versions prior to 2.1.0 Description: The issue allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash due to the use o...

CVE-2021-32525: Use of Hard-coded Password

The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been...

QSAN Storage Manager 路径遍历漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An absolute path traversal vulnerability exists in FileDownload in QSAN Storage Manager 3.3.1 and earlier versions. An attacker can exploit this vulnerability by injecting symbolic links to access arbitra...