CVE-2020-29127

An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging into the portal as a root user using any web browser, the portal can be accessed with root privileges when the URI cgi-bin/csp?cspid=XXXXXXXXXX&csppage=cgiPgOverview&csplang=en is visited from a...

CVE-2020-29127

CVE-2020-29127 affects Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging in as root, visiting the URI cgi-bin/csp?cspid={…}&csppage=cgi_PgOverview&csplang=en from a different browser grants root privileges to the portal, indicating a root authentication bypass. The issue ...

Fujitsu Eternus Storage DX200 S4 Authorization Issues Vulnerability

The Fujitsu Fujitsu Eternus Storage DX200 S4 is a storage appliance for enterprise environments that provides storage support for server virtualization, email, databases, business applications, and centralized file services from Fujitsu Japan. The storage device features thin provisioning,...