CVE-2020-5365

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon versions 8.2.2 and earlier

Description The issue concerns a pre-configured support account, remotesupport, which is bundled in the Dell EMC Isilon OneFS installation and used for diagnostics and other support functions. Although the default password for this account is different for every cluster, it is predictable, posing a security risk.

Recommendations For Dell EMC Isilon versions 8.2.2 and earlier, consider changing the default password of the remotesupport account to a strong, unpredictable password to mitigate the risk of exploitation. As a temporary workaround, restrict access to the remotesupport account until a more secure configuration can be implemented.