1. Home
  2. CVE Database
  3. CVE-2018-1205
HIGH · 7.5

CVE-2018-1205

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM s...

Vulnerability Description

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
DellEmc Scaleio< 2.5

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2018-1205?

CVE-2018-1205 is a vulnerability with a CVSS score of 7.5 (HIGH). Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM s...

How severe is CVE-2018-1205?

CVE-2018-1205 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1205?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Scaleio.