VULNERABILITY INTELLIGENCE
CVE-2015-4525
CVSS score9 HIGH
EPSS probability2.17%
CISA KEVNot currently listed
Published2015-07-04
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Weakness classification
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')