CVE: CVE-2020-5365

Export to Word

Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS installation. This account is used for diagnostics and other support functions. Although the default password is different for every cluster, it is predictable.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

S1 – Steal Customer Account Information

EPSS

Score: 0.0026
Percentile: 0.49166

CVSS Scoring

CVSS v3.1 Score: 5.3

Severity: MEDIUM

Mapped CWE(s)

CWE-330 : Use of Insufficiently Random Values
CWE-341 : Predictable from Observable State

All CAPEC(s)

CAPEC-112: Brute Force
CAPEC-485: Signature Spoofing by Key Recreation
CAPEC-59: Session Credential Falsification through Prediction

CAPEC(s) with Mapped TTPs

CAPEC-112: Brute Force
Mapped TTPs:
- T1110 : Brute Force
CAPEC-485: Signature Spoofing by Key Recreation
Mapped TTPs:
- T1552.004 : Private Keys

Mapped ATT&CK TTPs

T1110 : Brute Force
Kill Chain: credential-access
T1552.004 : Private Keys
Kill Chain: credential-access

Malware

APTs Threat Group Associations

Campaigns

Operation Wocao
SolarWinds Compromise
2016 Ukraine Electric Power Attack
Operation Dream Job

Affected Products

cpe:2.3:a:dell:emc_isilon_onefs:*:*:*:*:*:*:*:*

← Back to Home