CVE-2021-32535
Assigner: twcert
Published: 2021-07-07T00:00:00
State: PUBLISHED
affected: product: SANOS
vendor: QSAN
versions: lessThanOrEqual: 2.0.0
status: affected
version: unspecified
versionType: custom
datePublic: 2021-07-07T00:00:00
descriptions: value: The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-798
description: CWE-798 Use of Hard-coded Credentials
type: CWE
solutions: value: QSAN SANOS v2.0.1
source: advisory: TVN-202104046
discovery: EXTERNAL
title: QSAN SANOS - Use of Hard-coded Credentials
x_generator: engine: Vulnogram 0.0.9