1. Home
  2. CVE Database
  3. CVE-2021-32519
CRITICAL · 9.8

CVE-2021-32519

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash....

Vulnerability Description

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QsanSanos< 2.1.0
QsanStorage Manager< 3.3.2
QsanXevo< 2.1.0

Related Weaknesses (CWE)

CWE-916

References

FAQ

What is CVE-2021-32519?

CVE-2021-32519 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash....

How severe is CVE-2021-32519?

CVE-2021-32519 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-32519?

Check the references section above for vendor advisories and patch information. Affected products include: Qsan Sanos, Qsan Storage Manager, Qsan Xevo.