VULNERABILITY INTELLIGENCE

CVE-2021-32525

CVSS score9.1 CRITICAL
EPSS probability1.72%
CISA KEVNot currently listed
Published2021-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

Weakness classification

  • twcert@cert.org.tw: CWE-259
  • nvd@nist.gov: CWE-798

Primary references