Dell Emc Scaleio vulnerabilities

4 CVEs affecting Dell Emc Scaleio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1238, published 2018-03-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1237, published 2018-03-27. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installation Agent (LIA). This component is deployed on every server in the…
CVE-2018-1238, published 2018-03-27. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent (LIA). This component is used for central management of ScaleIO deployment and uses…
CVE-2018-1205, published 2018-03-27. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM…
CVE-2017-8001, published 2017-11-28. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log…