Skip to main content
Back to all
2021-07-07

QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort

ZUSOART ID
CVE-2021-32519
CVE ID
CVE-2021-32519
Vulnerability Type
CVSS 4.0 Base
9.8
Description

QSAN Storage Manager, XEVO, SANOS使用MD5儲存使用者密碼，攻擊者可輕易破解獲得密碼資訊，取得相關權限。

Vendor
Product
Category
Version affected
QSAN Storage Manager <= version 3.3.1 (build 202101041800)QSAN XEVO < version 1.2.0 (build 202007081800)QSAN SANOS <= version 2.0.0 (build 202012222000)
Mitigations

QSAN Storage Manager v3.3.2QSAN XEVO v2.1.0QSAN SANOS v2.1.0

Release date
2021-07-07
Credit

ZUSO ART (ART@zuso.ai)