CVE-2018-1205

HIGH

7.5

CVSS Severity Score

EPSS Score0.1480%

EPSS Percentile35.87th

PublishedMar 27, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash.

Affected Platforms (CPE)

📦

Dell

Emc Scaleio

< 2.5

References & Advisories

🔗 http://seclists.org/fulldisclosure/2018/Mar/59

Related Vulnerabilities

CVE-2018-12379.8

Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installatio...

CVE-2017-80209.8

An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote...

CVE-2016-98678.8

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel m...

CVE-2017-80018.4

An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the Sc...