PT-2022-3812 · Fujitsu · Fujitsu Eternus Centricstor Cs8000

Published 2022-04-06 · Updated 2022-06-27 · CVE-2022-31795

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fujitsu ETERNUS CentricStor CS8000 versions prior to 8.1A SP02 P04

Description The issue is related to the possibility of command injection in the Fujitsu ETERNUS CentricStor CS8000 device. An attacker can influence the username (user), password (pw), and file-name (file) parameters and inject special characters to force the application to execute arbitrary commands. This can be done by injecting semicolons, backticks, or command-substitution sequences. The vulnerability resides in the grel finfo function in grel.php.

Recommendations For versions prior to 8.1A SP02 P04, update to version 8.1A SP02 P04 or later to resolve the issue. As a temporary workaround, consider restricting access to the grel.php file and the grel finfo function to minimize the risk of exploitation. Avoid using the parameters user, pw, and file in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-04609

CVE-2022-31795

Affected Products

Fujitsu Eternus Centricstor Cs8000

References · 9

• 🔥 https://research.nccgroup.com/2022/05/27/technical-advisory-fujitsu-centricstor-control-center-v8-1-unauthenticated-command-injection · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31795 · Security Note
• https://support.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-PSS-IS-2022-050316-Security-Notice-SF.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04609 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31795 · Vendor Advisory
• https://t.me/cibsecurity/44826 · Telegram Post
• https://vuldb.com/ru/?id.202424 · Note
• https://cwe.mitre.org/data/definitions/78.html · Note
• https://t.me/cvenotify/31898 · Telegram Post