critical9.8
CVE-2021-32519
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-tex…
Impact
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qsan | Sanos | before 2.1.0 |
| Qsan | Storage Manager | before 3.3.2 |
| Qsan | Xevo | before 2.1.0 |