PatchTheCVEsanos vulnerabilities and fixes
Recent CVEs affecting sanos, with upgrade or downgrade steps. 7 tracked.
sanos has 7 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 7. Most recent: 2021-07-07. Highest priority: CVE-2021-32529 (score 60/100).
- CVE-2021-32535 CRITICAL 9.8 UPGRADE The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to o
- CVE-2021-32534 CRITICAL 9.8 UPGRADE QSAN SANOS factory reset function does not filter special parameters
- CVE-2021-32533 CRITICAL 9.8 UPGRADE The QSAN SANOS setting page does not filter special parameters
- CVE-2021-32529 CRITICAL 9.8 UPGRADE UPGRADE Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitra
- CVE-2021-32522 CRITICAL 9.8 UPGRADE UPGRADE Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS a
- CVE-2021-32521 HIGH 7.3 UPGRADE UPGRADE Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to
- CVE-2021-32519 CRITICAL 9.8 UPGRADE UPGRADE Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS
FAQ
How do I fix sanos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sanos being exploited right now?
None of the tracked sanos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sanos CVE should I patch first?
CVE-2021-32529 currently ranks highest (60/100): Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitra.