2021-07-07

QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts

ZUSOART ID

CVE-2021-32522

CVE ID

CVE-2021-32522

Vulnerability Type

CVSS 4.0 Base

9.8

Description

QSAN Storage Manager, XEVO, SANOS並未限制短時間內登入失敗的身分驗證次數，使遠端攻擊者可以透過暴力破解取得使用者權限。

QSAN Storage Manager <= version 3.3.1 (build 202101041800)QSAN XEVO < version 1.2.0 (build 202007081800)QSAN SANOS <= version 2.0.0 (build 202012222000)

‍

Vendor

Product