CVE-2020-29127

An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging into the portal as a root user (using any web browser), the portal can be accessed with root privileges when the URI cgi-bin/csp?cspid={XXXXXXXXXX}&csppage=cgi_PgOverview&csplang=en is visited from a different web browser.

• CWE-287

• http://packetstormsecurity.com/files/160255/Fujitsu-Eternus-Storage-DX200-S4-Broken-Authentication.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2020110215Exploit, Third Party Advisory
• https://seccops.com/fujitsu-eternus-storage-dx200-s4-broken-authentication/Third Party Advisory
• https://www.first.org/members/teams/fujitsu_psirtThird Party Advisory
• http://packetstormsecurity.com/files/160255/Fujitsu-Eternus-Storage-DX200-S4-Broken-Authentication.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2020110215Exploit, Third Party Advisory
• https://seccops.com/fujitsu-eternus-storage-dx200-s4-broken-authentication/Third Party Advisory
• https://www.first.org/members/teams/fujitsu_psirtThird Party Advisory

Published

Nov 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29075Acrobat Reader DC versions 2020.013.20066 (and earlier), 202…6.5
• CVE-2020-2908Vulnerability in the Oracle VM VirtualBox product of Oracle …8.2
• CVE-2020-2909Vulnerability in the Oracle VM VirtualBox product of Oracle …2.8
• CVE-2020-2910Vulnerability in the Oracle VM VirtualBox product of Oracle …6.5
• CVE-2020-2911Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
• CVE-2020-2912Vulnerability in the PeopleSoft Enterprise CS Campus Communi…5
• CVE-2020-29128petl before 1.68, in some configurations, allows resolution …9.8
• CVE-2020-29129ncsi.c in libslirp through 4.3.1 has a buffer over-read beca…4.3
• CVE-2020-2913Vulnerability in the Oracle VM VirtualBox product of Oracle …7
• CVE-2020-29130slirp.c in libslirp through 4.3.1 has a buffer over-read bec…4.3
• CVE-2020-29133jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded…6.1
• CVE-2020-29134The TOTVS Fluig platform allows path traversal through the p…8.6