Fujitsu Eternus CS8000 Firmware vulnerabilities

2 CVEs affecting Fujitsu Eternus CS8000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31795, published 2022-06-20.

More from Fujitsu.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-31795, published 2022-06-20. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the grel_finfo function in grel.php. An attacker is able to…
• CVE-2022-31794, published 2022-06-20. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is…