VULNERABILITY INTELLIGENCE
CVE-2021-32513
CVSS score9.8 CRITICAL
EPSS probability2.12%
CISA KEVNot currently listed
Published2021-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
Weakness classification
- twcert@cert.org.tw: CWE-78
Primary references
- twcert@cert.org.tw — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory