CVE-2016-0907: Medium severity dell emc isilon onefs vulnerability

Published May 30, 2016

Updated

EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115.

Affected Software

23 affected components

EMC Isilon OneFS=7.1.0.0

EMC Isilon OneFS=7.1.0.1

EMC Isilon OneFS=7.1.0.2

EMC Isilon OneFS=7.1.0.3

EMC Isilon OneFS=7.1.0.4

EMC Isilon OneFS=7.1.0.5

EMC Isilon OneFS=7.1.0.6

EMC Isilon OneFS=7.1.1.0

EMC Isilon OneFS=7.1.1.1

EMC Isilon OneFS=7.1.1.2

EMC Isilon OneFS=7.1.1.3

EMC Isilon OneFS=7.1.1.4

EMC Isilon OneFS=7.1.1.5

EMC Isilon OneFS=7.1.1.6

EMC Isilon OneFS=7.1.1.7

EMC Isilon OneFS=7.1.1.8

EMC Isilon OneFS=7.1.1.9

EMC Isilon OneFS=7.2.0.0

EMC Isilon OneFS=7.2.1.0

EMC Isilon OneFS=7.2.1.1

EMC Isilon OneFS=7.2.1.2

EMC Isilon OneFS=8.0.0.0

EMC IsilonSD Edge OneFS=8.0.0.0

Event History

May 30, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0907?

CVE-2016-0907 has been assigned a severity rating of high due to its potential for exploitation by man-in-the-middle attacks.

How do I fix CVE-2016-0907?

To remedy CVE-2016-0907, upgrade your EMC Isilon OneFS to version 7.2.1.3 or later, or to version 8.0.0.1 or later.

Which versions of Isilon are affected by CVE-2016-0907?

CVE-2016-0907 affects EMC Isilon OneFS versions 7.1.x, 7.2.x prior to 7.2.1.3 and 8.0.x prior to 8.0.0.1.

What type of vulnerability is CVE-2016-0907?

CVE-2016-0907 is a security vulnerability related to insufficient SMB signing within DCERPC sessions.

Can CVE-2016-0907 lead to data breaches?

Yes, if exploited, CVE-2016-0907 can allow attackers to spoof SMB clients, potentially leading to data breaches.