EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Isilon_onefs | Emc | 7.1.0.0 | 7.1.0.0 |
| Isilon_onefs | Emc | 7.1.0.1 | 7.1.0.1 |
| Isilon_onefs | Emc | 7.1.0.2 | 7.1.0.2 |
| Isilon_onefs | Emc | 7.1.0.3 | 7.1.0.3 |
| Isilon_onefs | Emc | 7.1.0.4 | 7.1.0.4 |
| Isilon_onefs | Emc | 7.1.0.5 | 7.1.0.5 |
| Isilon_onefs | Emc | 7.1.0.6 | 7.1.0.6 |
| Isilon_onefs | Emc | 7.1.1.0 | 7.1.1.0 |
| Isilon_onefs | Emc | 7.1.1.1 | 7.1.1.1 |
| Isilon_onefs | Emc | 7.1.1.2 | 7.1.1.2 |
| Isilon_onefs | Emc | 7.1.1.3 | 7.1.1.3 |
| Isilon_onefs | Emc | 7.1.1.4 | 7.1.1.4 |
| Isilon_onefs | Emc | 7.1.1.5 | 7.1.1.5 |
| Isilon_onefs | Emc | 7.1.1.6 | 7.1.1.6 |
| Isilon_onefs | Emc | 7.1.1.7 | 7.1.1.7 |
| Isilon_onefs | Emc | 7.1.1.8 | 7.1.1.8 |
| Isilon_onefs | Emc | 7.1.1.9 | 7.1.1.9 |
| Isilon_onefs | Emc | 7.2.0.0 | 7.2.0.0 |
| Isilon_onefs | Emc | 7.2.1.0 | 7.2.1.0 |
| Isilon_onefs | Emc | 7.2.1.1 | 7.2.1.1 |
| Isilon_onefs | Emc | 7.2.1.2 | 7.2.1.2 |
| Isilon_onefs | Emc | 8.0.0.0 | 8.0.0.0 |
| Isilonsd_edge_onefs | Emc | 8.0.0.0 | 8.0.0.0 |