CVE-2016-0907

5.9 mediumEPSS 0.9%

Medium (5.9) in emc. EPSS 0.9% chance of exploitation in the next 30 days.

EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2016-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

emc:isilon_onefs
emc:isilonsd_edge_onefs

References

http://seclists.org/bugtraq/2016/May/117
http://seclists.org/bugtraq/2016/May/117

Check your stack JSON