CVE-2016-0907

EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a…

published May 30, 2016

CVSS
—
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00862 · 57.9th percentile
Published
2016-05-30T01:00Z
EPSS history
Timeline
  • 30 MAY 01:00Z
    EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a…
    cvelistv5