Emc Isilon Onefs

Vendor:

First CVE: Mar 26, 2018 · Active for 8 years

14
Total CVEs
More Total CVEs than 92% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Emc Isilon Onefs over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 26, 2018
8 years ago
Most Recent CVE
Oct 21, 2022
1,376 days ago

CVE Severity & Scoring

Emc Isilon Onefs14 CVEs
All CVEs353,173 CVEs
MediumHighCritical
Attack Vector
Local3 (21.4%)
Network11 (78.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None13 (92.9%)
Unknown0 (0.0%)
Required1 (7.1%)
Privileges Required
Low6 (42.9%)
High2 (14.3%)
None6 (42.9%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2018-1213HIGH
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site r
Mar 26, 20188.838NOYES
CVE-2018-1204MEDIUM
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerabi
Mar 26, 20186.732NOYES
CVE-2020-5328CRITICAL
Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syn
Mar 6, 20209.831NONO
CVE-2018-1203MEDIUM
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcp
Mar 26, 20186.731NOYES
CVE-2020-5353HIGH
The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home di
Jul 29, 20218.828NONO
CVE-2020-5371HIGH
Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, cou
Jul 6, 20208.828NONO
CVE-2020-26180HIGH
Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote m
Jul 28, 20218.827NONO
CVE-2020-5369HIGH
Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may explo
Sep 2, 20208.826NONO
CVE-2020-5365HIGH
Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS install
May 20, 20207.525NONO
CVE-2020-26181HIGH
Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The co
Jan 5, 20217.824NONO
View all 14 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
21.4% of CVEs· 87th percentile

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Emc Isilon Onefs

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
8.2.218.81.2%00
8.1.217.51.1%00
8.1.0.417.51.1%00
8.1.0.317.51.1%00
8.1.0.218.82.0%01
8.0.0.717.51.1%00
7.1.1.1127.82.2%02