CVE-2020-5364

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon OneFS versions 8.2.2 and earlier

Description The issue concerns an SNMPv2 vulnerability where the SNMPv2 service is enabled by default with a pre-configured community string, allowing read-only access to various aspects of the Isilon cluster. Some of the accessible information is considered sensitive and could facilitate additional access.

Recommendations For Dell EMC Isilon OneFS versions 8.2.2 and earlier, consider disabling the SNMPv2 service or changing the pre-configured community string to prevent unauthorized access. As a temporary workaround, restrict access to sensitive information within the Isilon cluster to minimize the risk of exploitation.