Eternus Cs8000 Firmware vulnerabilities

2 known vulnerabilities in Eternus Cs8000 Firmware from Fujitsu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Eternus Cs8000 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-31795Jun 20, 2022FujitsuEPSS 3.16%

  An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the grel_finfo function in grel.php. An attacker is able to influence the username (user), password (pw), and file-name (f

• 9.8 Critical severity

  Eternus Cs8000 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-31794Jun 20, 2022FujitsuEPSS 3.16%

  An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is able to influence the unitName POST parameter and inject speci