CVE-2022-31795

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

CVE-2022-31795: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

PT-2022-2886

Name of the Vulnerable Software and Affected Versions FUJITSU ETERNUS CS8000 affected versions not specified Description The issue is related to a scripting vulnerability in the grel.php web interface of the FUJITSU ETERNUS CS8000 unified platform for backup and archiving consolidation. It involv...

PT-2022-3812

Name of the Vulnerable Software and Affected Versions Fujitsu ETERNUS CentricStor CS8000 versions prior to 8.1A SP02 P04 Description The issue is related to the possibility of command injection in the Fujitsu ETERNUS CentricStor CS8000 device. An attacker can influence the username user, password...