CVEvulnerability

CVE-2020-5365

7.5 HIGH Published 2020-05-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-05-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-330, CWE-341

Description

Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS installation. This account is used for diagnostics and other support functions. Although the default password is different for every cluster, it is predictable.

Affected configurations

• dell emc isilon onefs (<= 8.2.2)

Related

Weakness · CWE (2)

  • CWE-330 Use of Insufficiently Random Values weakness
  • CWE-341 Predictable from Observable State weakness

Referenced by CWE · observed example (1)

  • CWE-1391 Use of Weak Credentials weakness

References