Emc Scaleio vulnerabilities

5 CVEs affecting Emc Scaleio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8020, published 2017-11-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8020, published 2017-11-28. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthenticated attacker to execute arbitrary commands with root…
CVE-2017-8019, published 2017-11-28. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentially allow an unauthenticated remote attacker to send specifically crafted packets…
CVE-2016-9867, published 2017-01-06. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate…
CVE-2016-9869, published 2017-01-06. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO…
CVE-2016-9868, published 2017-01-06. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which…