CVE-2015-4525

EUVD-2015-4545
The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
emcisilon_onefs
𝑥
≤ 7.1.1.0
emcisilon_onefs
7.1.1.1
emcisilon_onefs
7.1.1.2
emcisilon_onefs
7.1.1.3
emcisilon_onefs
7.1.1.4
emcisilon_onefs
7.2.0.0
emcisilon_onefs
7.2.0.1
𝑥
= Vulnerable software versions