VULNERABILITY INTELLIGENCE

CVE-2021-32530

CVSS score9.8 CRITICAL
EPSS probability2.31%
CISA KEVNot currently listed
Published2021-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.

Weakness classification

  • twcert@cert.org.tw: CWE-78

Primary references