CVE-2021-32531
QSAN XEVO - Command Injection Following via Init function
- State
- Published
- Severity
- 9.8 Critical
- Published
- Jul 7, 2021
- Updated
- Sep 17, 2024
- Reserved
- May 10, 2021
Description
OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-78 OS Command Injection
Affected Products
| Product | Versions |
|---|---|
XEVOQSAN |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.