« Volver al listado

CVE-2019-19145

Estado: AplazadaMedia (5.8)—

Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65536 possible passwords.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Quantum — Superloader 3AI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-19145",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-19145",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-01T13:31:09.531740Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@mitre.org",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "Quantum",
          "product": "SuperLoader",
          "versions": [
            {
              "status": "affected",
              "version": "3 V94.0 005E.0h",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2025-08-01T04:16:11.330",
  "references": [
    {
      "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0005.md",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.dell.com/community/PowerVault/PowerVault-124T-Username-Password/td-p/3004075",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.quantum.com/en/products/tape-storage/superloader-3/",
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@mitre.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-521"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65536 possible passwords."
    },
    {
      "lang": "es",
      "value": "Los dispositivos Quantum SuperLoader 3 V94.0 005E.0h permiten a los atacantes acceder a la cuenta fa codificada porque solo hay 65536 contraseñas posibles."
    }
  ],
  "lastModified": "2026-06-17T02:26:13.663",
  "sourceIdentifier": "cve@mitre.org"
}