Log in Start free

Vulnerability · Published Oct 20, 2025 · Assigned by jpcert

CVE-2025-62577

High 8.8

In plain English

A high-severity incorrect default permissions in ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9) from Fsas Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.0)8.8High
Exploit odds (30 days)0.2%top 91.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.

Affected products (as reported)

VendorProductVersions
Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager Standard Edition (for Solaris 10/ 11) 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF Storage Cruiser (for Solaris 10/ 11) 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9) 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF Expressn (for RHEL 7/ 8/ 9) 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF Storage Cruisern (for RHEL 7/ 8/ 9) 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager Standard Edition (for Windows Server 2016/ 2019/ 2022) 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF Express (for Windows Server 2016/ 2019/ 2022) 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Fsas Technologies Inc. ETERNUS SF Storage Cruiser (for Windows Server 2016/ 2019/ 2022) 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1

Weakness: CWE-276 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References