Approved changes feed: RSS · Atom

cpe:2.3:a:qsan:storage_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQsan (44bc61fa-bc6b-502f-a13e-419f02ac1286)
ProductStorage Manager (a1122f6e-6165-5885-92a1-ec9b1d2ccfcc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32528 vulnerable 2026-06-08 05:32:07.390766 QSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized Actor
MEDIUM (5.3)
Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
Published: 2021-07-07T14:12:14.468Z
Updated: 2024-09-16T16:38:38.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32527 vulnerable 2026-06-08 05:32:07.390468 QSAN Storage Manager - Path Traversal-2
HIGH (7.5)
Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download function. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
Published: 2021-07-07T14:12:12.917Z
Updated: 2024-09-16T19:30:57.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32526 vulnerable 2026-06-08 05:32:07.390177 QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource
MEDIUM (6.5)
Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
Published: 2021-07-07T14:12:11.318Z
Updated: 2024-09-16T16:24:00.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32525 vulnerable 2026-06-08 05:32:07.389869 QSAN Storage Manager - Use of Hard-coded Password-2
CRITICAL (9.1)
The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
Published: 2021-07-07T14:12:09.748Z
Updated: 2024-09-17T04:24:33.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32524 vulnerable 2026-06-08 05:32:07.389449 QSAN Storage Manager - Command Injection-3
CRITICAL (9.1)
Command injection vulnerability in QSAN Storage Manager allows remote privileged users to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
Published: 2021-07-07T14:12:08.193Z
Updated: 2024-09-17T04:00:25.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32523 vulnerable 2026-06-08 05:32:07.389132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32522 vulnerable 2026-06-08 05:32:07.388753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32521 vulnerable 2026-06-08 05:32:07.388346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32520 vulnerable 2026-06-08 05:32:07.387939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32519 vulnerable 2026-06-08 05:32:07.385165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32518 vulnerable 2026-06-08 05:32:07.384821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32517 vulnerable 2026-06-08 05:32:07.384522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32516 vulnerable 2026-06-08 05:32:07.384241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32515 vulnerable 2026-06-08 05:32:07.383950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32514 vulnerable 2026-06-08 05:32:07.383659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32513 vulnerable 2026-06-08 05:32:07.383377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32512 vulnerable 2026-06-08 05:32:07.383096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32511 vulnerable 2026-06-08 05:32:07.382815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32510 vulnerable 2026-06-08 05:32:07.382511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32509 vulnerable 2026-06-08 05:32:07.382089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32508 vulnerable 2026-06-08 05:32:07.381750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32507 vulnerable 2026-06-08 05:32:07.381419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32506 vulnerable 2026-06-08 05:32:07.380974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.