VULNERABILITY INTELLIGENCE

CVE-2021-32521

CVSS score7.3 HIGH
EPSS probability0.71%
CISA KEVNot currently listed
Published2021-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Weakness classification

  • twcert@cert.org.tw: CWE-259
  • nvd@nist.gov: CWE-798

Primary references