CVE-2020-5353highCWE-276

CVE-2020-5353: high-severity vulnerability in Dell Isilon OneFS

Published · Updated

Follow this CVE+ Monitor Isilon OneFS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.0%
The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier (UID) over NFS to rewrite sensitive files to gain administrative access to the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Dell · Isilon OneFS
Related CVEs — Dell Isilon OneFS

In the same product, most dangerous first.

CVE-2020-5328CRITICALCVE-2020-5328EPSS 1.4%CVE-2020-5369HIGHCVE-2020-5369EPSS 1.2%CVE-2020-5371HIGHCVE-2020-5371EPSS 1.2%CVE-2020-5318HIGHCVE-2020-5318EPSS 1.1%CVE-2020-5347MEDIUMCVE-2020-5347EPSS 1.0%CVE-2020-5383MEDIUMCVE-2020-5383EPSS 1.0%