Approved changes feed: RSS · Atom
cpe:2.3:a:dell_emc:scaleio:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9) |
|---|---|
| Product | Scaleio (aef021b2-6f6f-55e0-871c-1aafc093aee6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1238 |
vulnerable | 2026-06-08 05:11:17.236911 |
Details available
Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent (LIA). This component is used for central management of ScaleIO deployment and uses shell commands for certain actions. A remote malicious user, with network access to LIA and knowledge of the LIA administrative password, could potentially exploit this vulnerability to run arbitrary commands as root on the systems where LIAs are installed.
Published: 2018-03-27T21:00:00.000Z
Updated: 2024-09-16T20:06:14.715Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1237 |
vulnerable | 2026-06-08 05:11:17.236491 |
Details available
Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installation Agent (LIA). This component is deployed on every server in the ScaleIO cluster and is used for central management of ScaleIO nodes. A remote malicious user, having network access to LIA, could potentially exploit this vulnerability to launch brute force guessing of user names and passwords of user accounts on the LIA.
Published: 2018-03-27T21:00:00.000Z
Updated: 2024-09-17T04:04:20.164Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1205 |
vulnerable | 2026-06-08 05:11:17.190088 |
Details available
Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash.
Published: 2018-03-27T21:00:00.000Z
Updated: 2024-09-16T17:33:25.660Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.