Dell Emc Isilon Onefs vulnerabilities

14 CVEs affecting Dell Emc Isilon Onefs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5355, published 2022-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1204, published 2018-03-26. Medium severity, CVSS 6.7. EPSS: 2.3% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the…
CVE-2018-1203, published 2018-03-26. Medium severity, CVSS 6.7. EPSS: 2.1% chance of exploitation in the next 30 days. In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being…
CVE-2018-1213, published 2018-03-26. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery…
CVE-2020-5328, published 2020-03-06. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked…
CVE-2020-5369, published 2020-09-02. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this…
CVE-2020-5371, published 2020-07-06. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage…
CVE-2020-5318, published 2020-02-06. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The…
CVE-2020-5347, published 2020-04-04. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing…
CVE-2020-5365, published 2020-05-20. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS installation. This account…
CVE-2020-5353, published 2021-07-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory. An…

Latest

CVE-2020-5355, published 2022-10-21. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding. This provides the remotesupport user and users with…
CVE-2020-26180, published 2021-07-28. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with…
CVE-2020-26181, published 2021-01-05. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user…
CVE-2020-5364, published 2020-05-20. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability. The SNMPv2 services is enabled, by default, with a pre-configured community string. This community string allows…