VULNERABILITY INTELLIGENCE
CVE-2021-32523
CVSS score9.1 CRITICAL
EPSS probability1.49%
CISA KEVNot currently listed
Published2021-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
Weakness classification
- twcert@cert.org.tw: CWE-285
- nvd@nist.gov: NVD-CWE-Other
Primary references
- twcert@cert.org.tw — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory