CVE-2020-29127: An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25.

Security readout for executives and security teams

This issue concerns Fujitsu Eternus Storage DX200 S4 management portals. A root-authenticated portal session could reportedly be reused from another browser, allowing root-level portal access if the session URL or identifier is obtained. The sources do not provide CVSS, fixed versions, or evidence of active exploitation. Exposure is most likely where DX200 S4 management interfaces are reachable beyond tightly controlled admin networks, or where root sessions, URLs, logs, screenshots, or browser history could leak. The affected scope is limited in the bundle to Fujitsu Eternus Storage DX200 S4 through 2020-11-25. Treat as high priority for environments using this storage platform because compromise could expose storage administration. Urgency is highest if the portal is remotely reachable or root sessions may be visible in logs, browser history, or shared support materials. Mitigation focus: Restrict the storage management portal to trusted admin networks only.; Check Fujitsu PSIRT or support guidance for fixed firmware or configuration advice.; Invalidate active root sessions after administrative use..

Prepared

Jun 5, 2026, 13:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.