Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fujitsu ETERNUS CentricStor CS8000 操作系统命令注入漏洞
Vulnerability Description
Fujitsu ETERNUS CentricStor CS8000是日本富士通（Fujitsu）公司的一个统一的备份和归档平台。用于大型机和开放系统的备份、归档、二级和对象存储。 Fujitsu ETERNUS CentricStor CS8000 8.1A SP02 P04 版本存在安全漏洞，该漏洞源于 hw_view.php 页面的 requestTempFile 函数中通过特殊字符可以注入并执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A