Back to all
2021-07-07

QSAN Storage Manager - Improper Authorization

ZUSOART ID
CVE-2021-32523
CVE ID
CVE-2021-32523
Vulnerability Type
CVSS 4.0 Base
9.1
Description

QSAN Storage Manager未恰當進行權限控管,使遠端攻擊者以管理者的權限登入後,可以繞過受限制的指令功能,執行任意系統指令。

Vendor
Product
Category
Version affected
QSAN Storage Manager <= version 3.3.1 (build 202101041800)
Mitigations

更新QSAN Storage Manager至QSM 3.3.7以上版本

Release date
2021-07-07
Credit

ZUSO ART (ART@zuso.ai)