CVE-2021-32514 - CVE House
Back to Database
Status published High CVE-2021-32514

QSAN Storage Manager - Improper Access Control Following via FirwareUpgrade function

Vulnerability Description

Improper access control vulnerability in FirmwareUpgrade in QSAN Storage Manager allows remote attackers to reboot and discontinue the device. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-32514

Credits & Attribution

No credits recorded in the NVD database.

References

More from QSAN

View All →
CVE-2021-37216
QSAN Storage Manager - Reflected Cross-Site Scripting
Medium 6.1
CVE-2021-32535
QSAN SANOS - Use of Hard-coded Credentials
Critical 9.8
CVE-2021-32534
QSAN SANOS - Command Injection
Critical 9.8
CVE-2021-32533
QSAN SANOS - Command Injection
Critical 9.8
CVE-2021-32532
QSAN XEVO - Path Traversal
High 7.5

Affected Vendor

Affected Software

Storage Manager
Vulnerable Versions:
unspecified

Timeline

Official Publish: July 7th, 2021
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-284

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1078 Valid Accounts
Persistence
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact