CVE-2018-1213: Cross-Site Request Forgery (CSRF)

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized reques...

PT-2018-10881

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon versions 7.2.1.x Dell EMC Isilon versions 8.0.0.0 through 8.0.0.6 Dell EMC Isilon versions 8.0.1.0 through 8.0.1.2 Dell EMC Isilon versions 8.1.0.0 through 8.1.0.1 Description The issue is related to a cross-site scripting...

CVE-2018-1201: Improper Neutralization of Input During Web Page Generation

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may...

CVE-2018-1188: Improper Neutralization of Input During Web Page Generation

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-site scripting vulnerability in the Authorization Providers page within the OneFS web administration interface. A malicious administrator may potentially injec...

PT-2018-10946

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon versions 8.1.0.0 through 8.1.0.1 Dell EMC Isilon versions 8.0.1.0 through 8.0.1.2 Dell EMC Isilon versions 8.0.0.0 through 8.0.0.6 Dell EMC Isilon version 7.1.1.11 Description The issue is related to a cross-site scripting...

PT-2018-10860

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon versions 8.1.0.0 through 8.1.0.1 Dell EMC Isilon versions 8.0.1.0 through 8.0.1.2 Dell EMC Isilon versions 8.0.0.0 through 8.0.0.6 Dell EMC Isilon versions 7.2.1.x Dell EMC Isilon version 7.1.1.11 Description The issue is relat...

Design/Logic Flaw

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code...

Path traversal

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by...

CVE-2018-1207

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code...

CVE-2018-1207

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code...

CVE-2018-1211

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by...

CVE-2018-1211

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by...

CVE-2018-1211

CVE-2018-1211 affects Dell EMC iDRAC7/iDRAC8, prior to firmware 2.52.52.52. A path traversal flaw in the iDRAC Web server URI parser allows an unauthenticated remote attacker to read sensitive configuration data by querying crafted URI strings. Impact is partial confidentiality compromise; no int...

CVE-2018-1207

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code...

CVE-2018-1207

Dell EMC iDRAC7/iDRAC8 devices running firmware versions prior to 2.52.52.52 are vulnerable to a CGI injection flaw. This vulnerability allows a remote unauthenticated attacker to leverage CGI variables to execute arbitrary code on the management controller. Successful exploitation can lead to a ...

Dell EMC NetWorker - Denial of Service

Dell EMC NetWorker - Denial of Service ''' Exploit Title: Dell EMC NetWorker DoS PoC Date: 18.03.2018 Exploit Author: Marek Cybul Vendor Homepage: https://www.emc.com/data-protection/networker.htm Versions: Dell EMC NetWorker versions prior to 9.2.1.1 Dell EMC NetWorker versions prior to 9.1.1.6...

PT-2018-10986

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC7/iDRAC8 versions prior to 2.52.52.52 Description The issue allows a remote unauthenticated attacker to potentially execute remote code using CGI variables. Recommendations For versions prior to 2.52.52.52, update to version...

CVE-2018-1207: Improper Control of Generation of Code

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code...

CVE-2018-1211: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by...

Dell EMC NetWorker - Denial of Service Exploit

Exploit for linux platform in category dos / poc ''' Exploit Title: Dell EMC NetWorker DoS PoC Date: 18.03.2018 Exploit Author: Marek Cybul Vendor Homepage: https://www.emc.com/data-protection/networker.htm Versions: Dell EMC NetWorker versions prior to 9.2.1.1 Dell EMC NetWorker versions prior t...