CVE-2025-62577

Impact

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://jvn.jp/en/jp/JVN44266462/
• https://www.fsastech.com/ja-jp/resources/security/2025/1020.html
• https://www.fujitsu.com/global/support/products/computing/storage/20251020/index.html
• https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-STR-2025-102005-Security-Notice.pdf