What’s Vulnerable › Vulnerabilities
CVE-2025-62577
- Severity: high (CVSS 8.4 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-20 · updated 2026-06-17
- Weakness: CWE-276
Description
ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.
Affected products
- Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9): 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager Standard Edition (for Solaris 10/ 11): 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager Standard Edition (for Windows Server 2016/ 2019/ 2022): 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF Express (for Windows Server 2016/ 2019/ 2022): 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF Expressn (for RHEL 7/ 8/ 9): 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF Storage Cruiser (for Solaris 10/ 11): 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF Storage Cruiser (for Windows Server 2016/ 2019/ 2022): 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. ETERNUS SF Storage Cruisern (for RHEL 7/ 8/ 9): 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
References
- https://jvn.jp/en/jp/JVN44266462/
- https://www.fsastech.com/ja-jp/resources/security/2025/1020.html
- https://www.fujitsu.com/global/support/products/computing/storage/20251020/index.html
- https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-STR-2025-102005-Security-Notice.pdf
Get alerted when CVE-2025-62577 or the next vulnerability affects your stack