Vulnerability in Dell EMC Isilon Onefs

CVE-2020-5365

Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS installation. This account is used for diagnostics and other support functions. Although the default password is different for every cluster, it is predictable.

EPSS: 0.010 (60.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-5365?
CVE-2020-5365 is a medium-severity vulnerability in Dell EMC Isilon Onefs, classified under CWE-341. CVSS score: 5.3/10. Published 2020-05-20.
How severe is CVE-2020-5365?
Medium severity. CVSS v3 base score is 5.3 out of 10.