← CVE Intelligence

CVE-2021-32530

QSAN XEVO - Command Injection Following via Array function PUBLISHED

Description (CNA)

OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.

Affected (CNA)

Vendor / productVersions
QSAN / XEVOaffected unspecified through 1.2.0

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.