What is CVE-2018-11071?

CVE-2018-11071 is a high-severity vulnerability in Dell Emc Isilon Onefs, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-09-18.

How severe is CVE-2018-11071?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2018-11071 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Dell Emc Isilon Onefs

CVE-2018-11071

Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Dell Emc Isilon Onefs — versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x
Dell Emc Isilonsd Edge — versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x
Emc Isilon_onefs
Emc Isilonsd_edge

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

security_alert@emc.com (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2018-11071?: CVE-2018-11071 is a high-severity vulnerability in Dell Emc Isilon Onefs, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-09-18.
How severe is CVE-2018-11071?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2018-11071 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.