Vulnerabilities > CVE-2016-9868 - 7PK - Security Features vulnerability in EMC Scaleio 2.0.1.0

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
emc
CWE-254

Summary

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client (SDC) server unavailable until the next reboot.

Vulnerable Configurations

Part Description Count
Application
Emc
1

Common Weakness Enumeration (CWE)