8.8
High
CVE-2025-62577 ETERNUS SF provided by Fsas Technologies Inc
Description
ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ETERNUS SF AdvancedCopy Manager Standard Edition (for Solaris 10/ 11) | Versions not published | |
| ETERNUS SF Storage Cruiser (for Solaris 10/ 11) | Versions not published | |
| ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9) | Versions not published | |
| ETERNUS SF Expressn (for RHEL 7/ 8/ 9) | Versions not published | |
| ETERNUS SF Storage Cruisern (for RHEL 7/ 8/ 9) | Versions not published | |
| ETERNUS SF AdvancedCopy Manager Standard Edition (for Windows Server 2016/ 2019/ 2022) | Versions not published | |
| ETERNUS SF Express (for Windows Server 2016/ 2019/ 2022) | Versions not published | |
| ETERNUS SF Storage Cruiser (for Windows Server 2016/ 2019/ 2022) | Versions not published |