CVE-2021-32520

The CVE-2021-32520 entry concerns QSAN Storage Manager (QSAN NAS OS) and a hard-coded cryptographic key vulnerability. The root cause is use of a hard-coded encryption key, which could allow an attacker to obtain user credentials and related permissions. The available documents consistently descr...

CVE-2021-33218

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access...

CVE-2021-33218

CVE-2021-33218 affects CommScope Ruckus IoT Controller

CVE-2021-32525

The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been...

CVE-2021-32535

The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

CVE-2021-32520

Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

QSAN Storage Manager Trust Management Vulnerability

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A hard-coded credentials vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and prior versions. An attacker can exploit this vulnerability to open the control interface via the...

PT-2021-19751

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: The issue allows remote attackers to access the control interface with administrator credentials by using a hard-coded password in the debug mode, enabling them to execute restricted...

PT-2021-20091

Name of the Vulnerable Software and Affected Versions CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier Description An issue was discovered where hard-coded API keys exist. Recommendations For CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier, update to a version that...

PT-2021-20089

Name of the Vulnerable Software and Affected Versions CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier Description An issue was discovered where hard-coded web application administrator passwords exist for the admin and nplus1user accounts. Recommendations For CommScope Ruckus IoT...

Joomla! Code Issues and Vulnerabilities

Joomla! is a set of forum components used in the Joomla! content management system. A code issue vulnerability exists in Joomla! 2.5.0 - 3.9.27. The vulnerability stems from a hard-coded ACL check for superuser missing from the install operation in cominstaller, which can be exploited to execute...

PT-2021-20088

Name of the Vulnerable Software and Affected Versions CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier Description An issue was discovered that involves hard-coded system passwords, which provide shell access. Recommendations For CommScope Ruckus IoT Controller versions 1.7.1.0 and...

CVE-2021-33219: Use of Hard-coded Credentials

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded Web Application Administrator Passwords for the admin and nplus1user accounts...

CVE-2021-33218: Use of Hard-coded Credentials

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access...

QSAN Storage Manager Trust Management Vulnerability

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A security vulnerability exists in QSAN Storage Manager that stems from the use of a hard-coded encryption key vulnerability that could be exploited by an attacker to gain access to user credentials and...

PT-2021-19746

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager affected versions not specified Description: The issue involves the use of a hard-coded cryptographic key in QSAN Storage Manager, allowing attackers to obtain users' credentials and related permissions. Recommendations:...

QSAN SANOS Trust Management Vulnerability

QSAN SANOS is the SAN storage management operating system from QSAN China. It comes with a refreshingly simple and easy-to-use Web GUI and can be easily deployed into any infrastructure. A trust management issue vulnerability exists in QSAN SANOS, which stems from the presence of hard-coded defau...

CVE-2021-33220: Use of Hard-coded Credentials

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist...

CVE-2021-32535: Use of Hard-coded Credentials

The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

CVE-2021-32520: Use of Hard-coded Cryptographic Key

Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document...