Vulnerability in Fsas Technologies Inc. Eternus Sf Advancedcopy Manager Standard Edition (For Rhel 7/ 8/ 9)
CVE-2025-62577
ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.
EPSS: 0.002 (7.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Fsas Technologies Inc. Eternus Sf Advancedcopy Manager Standard Edition (For Rhel 7/ 8/ 9) — versions 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Advancedcopy Manager Standard Edition (For Solaris 10/ 11) — versions 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Advancedcopy Manager Standard Edition (For Windows Server 2016/ 2019/ 2022) — versions 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Express (For Windows Server 2016/ 2019/ 2022) — versions 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Expressn (For Rhel 7/ 8/ 9) — versions 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Storage Cruiser (For Solaris 10/ 11) — versions 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Storage Cruiser (For Windows Server 2016/ 2019/ 2022) — versions 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
- Fsas Technologies Inc. Eternus Sf Storage Cruisern (For Rhel 7/ 8/ 9) — versions 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-62577?
- CVE-2025-62577 is a high-severity vulnerability in Fsas Technologies Inc. Eternus Sf Advancedcopy Manager Standard Edition (For Rhel 7/ 8/ 9), classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2025-10-20.
- How severe is CVE-2025-62577?
- High severity. CVSS v3 base score is 8.8 out of 10.