PT-2022-3813 · Fujitsu · Fujitsu Eternus Centricstor Cs8000

Published 2022-04-06 · Updated 2022-06-27 · CVE-2022-31794

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fujitsu ETERNUS CentricStor CS8000 (Control Center) versions prior to 8.1A SP02 P04

Description The issue resides in the requestTempFile function in hw view.php, allowing an attacker to influence the unitName POST parameter and inject special characters, such as semicolons, backticks, or command-substitution sequences, to force the application to execute arbitrary commands.

Recommendations For versions prior to 8.1A SP02 P04, update to version 8.1A SP02 P04 or later to resolve the issue. As a temporary workaround, consider restricting access to the hw view.php file and the requestTempFile function to minimize the risk of exploitation. Avoid using the unitName parameter in the affected POST request until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-04610

CVE-2022-31794

Affected Products

Fujitsu Eternus Centricstor Cs8000

References · 9

• 🔥 https://research.nccgroup.com/2022/05/27/technical-advisory-fujitsu-centricstor-control-center-v8-1-unauthenticated-command-injection · Exploit
• https://support.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-PSS-IS-2022-050316-Security-Notice-SF.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31794 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31794 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04610 · Security Note
• https://t.me/cvenotify/31899 · Telegram Post
• https://vuldb.com/ru/?id.202423 · Note
• https://t.me/cibsecurity/44831 · Telegram Post
• https://cwe.mitre.org/data/definitions/78.html · Note