CVE-2022-31794: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hwview.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons,...

Fujitsu ETERNUS CS8000 hw_view.php Code Execution

The vulnerability of the hwview.php web interface of the unified console consolidation platform for backup and archiving FUJITSU ETERNUS CS8000 relates to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain elevated...