VULNERABILITY INTELLIGENCE

CVE-2020-5353

CVSS score8.8 HIGH
EPSS probability0.99%
CISA KEVNot currently listed
Published2021-07-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier (UID) over NFS to rewrite sensitive files to gain administrative access to the system.

Weakness classification

  • security_alert@emc.com: CWE-276
  • nvd@nist.gov: CWE-276

Primary references