CVE-2018-1203: In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges.

Security readout for executives and security teams

Certain Dell EMC Isilon OneFS releases allowed the compadmin account to run tcpdump in a way that could become root-level code execution. This is a serious internal privilege escalation risk for affected storage clusters. Exposure is limited to organizations running the listed OneFS versions where compadmin access exists. It is not described as a remote unauthenticated issue in the provided sources. Prioritize remediation where affected OneFS clusters support sensitive or business-critical data. The issue requires existing compadmin capability, but successful abuse could give root control over storage infrastructure. Mitigation focus: Identify affected OneFS clusters and prioritize them for remediation.; Check Dell EMC DSA-2018-018 guidance for supported fixed versions or workarounds.; Restrict and monitor compadmin access until remediation is complete..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.