CVE-2021-32530

CVE-2021-32530 describes an OS command injection in the QSAN XEVO product’s Array function, where the status parameter could be used by a remote, unauthenticated attacker to execute arbitrary commands. Reports from multiple sources (NVD entry and CNVD/CNNVD-style disclosures) confirm the vulnerab...

CVE-2021-32530 QSAN XEVO - Command Injection Following via Array function

OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0...