CVE-2021-32522

9.8 criticalEPSS 1.4%

Critical (9.8) in qsan. EPSS 1.4% chance of exploitation in the next 30 days.

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2021-07-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qsan:sanos
qsan:storage_manager
qsan:xevo

References

https://www.twcert.org.tw/tw/cp-132-4878-0a279-1.html
https://www.twcert.org.tw/tw/cp-132-4878-0a279-1.html

Check your stack JSON