PatchTheCVExevo vulnerabilities and fixes
Recent CVEs affecting xevo, with upgrade or downgrade steps. 7 tracked.
xevo has 7 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 7. Most recent: 2021-07-07. Highest priority: CVE-2021-32531 (score 60/100).
- CVE-2021-32532 HIGH 7.5 UPGRADE Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download ar
- CVE-2021-32531 CRITICAL 9.8 UPGRADE OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary
- CVE-2021-32530 CRITICAL 9.8 UPGRADE OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to e
- CVE-2021-32529 CRITICAL 9.8 UPGRADE UPGRADE Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitra
- CVE-2021-32522 CRITICAL 9.8 UPGRADE UPGRADE Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS a
- CVE-2021-32521 HIGH 7.3 UPGRADE UPGRADE Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to
- CVE-2021-32519 CRITICAL 9.8 UPGRADE UPGRADE Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS
FAQ
How do I fix xevo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xevo being exploited right now?
None of the tracked xevo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xevo CVE should I patch first?
CVE-2021-32531 currently ranks highest (60/100): OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary .