CVE-2021-32519

Published: Jul 7, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.

Affected (3)

Products: Qsan: Sanos, Storage Manager, Xevo

3 products

Storage Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Qsan Sanos	Before 2.1.0
Qsan Storage Manager	Before 3.3.2
Qsan Xevo	Before 2.1.0

Related CWEs

Use of Password Hash With Insufficient Computational Effort

The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

References (2)

https://www.twcert.org.tw/tw/cp-132-4875-692f0-1.html

Source: twcert@cert.org.tw

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-4875-692f0-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.