CVE-2015-6848: EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 230...

Security readout for executives and security teams

This flaw affects EMC Isilon OneFS deployments using RFC 2307 in a specific Active Directory/SFU configuration. A remote authenticated AD user could gain root privileges. That turns a valid or compromised domain account into potential full storage appliance control. The provided sources do not include CVSS, exploit details, or active exploitation evidence. Exposure is likely limited to affected EMC Isilon OneFS clusters joined to Active Directory where RFC 2307 is configured and SFU is not universally present. Internet exposure is not established by the sources; the attacker must be authenticated as an AD user. Prioritize remediation for affected Isilon clusters that store sensitive data or allow broad AD access. The issue requires authentication, but successful abuse could give root control of storage infrastructure. Absence from KEV lowers immediate exploitation certainty, not business impact. Mitigation focus: Upgrade OneFS 7.1.x to 7.1.1.5 or later.; Upgrade OneFS 7.2.0.x to 7.2.0.3 or later.; Upgrade OneFS 7.2.1.x to 7.2.1.1 or later..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.