An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-06-20T14:38:29
Updated: 2024-08-03T07:26:01.296Z
Reserved: 2022-05-29T00:00:00
Link: CVE-2022-31794
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-06-20T15:15:13.700
Modified: 2024-11-21T07:05:20.507
Link: CVE-2022-31794
Redhat
No data.