Vulnerability in Dell EMC Isilon Onefs
CVE-2020-5365
Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS installation. This account is used for diagnostics and other support functions. Although the default password is different for every cluster, it is predictable.
EPSS: 0.010 (60.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Dell Emc_isilon_onefs
- Dell Isilon Onefs — versions unspecified
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-5365?
- CVE-2020-5365 is a medium-severity vulnerability in Dell EMC Isilon Onefs, classified under CWE-341. CVSS score: 5.3/10. Published 2020-05-20.
- How severe is CVE-2020-5365?
- Medium severity. CVSS v3 base score is 5.3 out of 10.