Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Emc Isilon Onefs · all components

Priority MEDIUM 45

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01387 Published 2020-03-06 Fixed in 8.2.0 CWE-306
Priority MEDIUM 42

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01932 Published 2018-03-26 No fix listed CWE-352
Priority MEDIUM 40

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01152 Published 2020-07-06 No fix listed CWE-732
Priority MEDIUM 40

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01214 Published 2020-09-02 Fixed in 8.1.2, 8.2.2 +1 CWE-732
Priority MEDIUM 40

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00991 Published 2021-07-29 Fixed in All supported CWE-276
Priority LOW 39

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00593 Published 2021-07-28 Fixed in OneFS 8.1.2, 8.2.2 +1 CWE-276
Priority LOW 35

Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00985 Published 2020-05-20 Fixed in 8.2.2 CWE-201
Priority LOW 35

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01126 Published 2020-02-06 No fix listed CWE-285
Priority LOW 34

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00258 Published 2021-01-05 Fixed in 8.1.2, 8.2.2 +1 CWE-269
TI-2018-01118 CVE-2018-1204 · GHSA-fqgg-5297-h6r4

Path traversal in Dell EMC Isilon OneFS

Priority LOW 34

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.02319 Published 2018-03-26 No fix listed CWE-22
Priority LOW 21

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00478 Published 2022-10-21 Fixed in 8.2.2 CWE-276
Open these records in search →