Back to all
2021-07-07

QSAN XEVO - Path Traversal

ZUSOART ID
CVE-2021-32532
CVE ID
CVE-2021-32532
Vulnerability Type
CVSS 4.0 Base
7.5
Description

QSAN XEVO後端分析功能含有Path Traversal漏洞,遠端攻擊者不須任何權限,透過該功能參數輸入任意系統檔案之路徑,即可下載。

Vendor
Product
Category
Version affected
QSAN XEVO < version 1.2.0 (build 202007081800)
Mitigations

QSAN XEVO v2.1.0

Release date
2021-07-07
Credit

ZUSO ART (ART@zuso.ai)