Security readout for executives and security teams
Plain-English summary
This vulnerability can make Dell EMC Isilon OneFS SmartConnect DNS service consume CPU and stop answering some DNS requests. It is not described as data theft or system takeover. The business impact is service availability: clients may fail to locate or access storage resources that depend on SmartConnect DNS.
Executive priority
Treat this as a moderate availability risk. It deserves timely remediation for storage clusters that support production workloads, especially where SmartConnect DNS is broadly reachable or critical to application access.
Technical view
CVE-2020-5347 affects Dell EMC Isilon OneFS 8.2.2 and earlier. A SmartConnect DNS error condition may loop, consuming CPU and potentially preventing other SmartConnect DNS responses. CVSS 3.1 is 5.3: network reachable, low complexity, no authentication, no user interaction, low availability impact only.
Likely exposure
Exposure is most likely in environments running Dell EMC Isilon OneFS 8.2.2 or earlier with SmartConnect DNS reachable by users, applications, or untrusted networks. Internet exposure is not stated in the sources and should be verified locally.
Exploitation context
The CVE is not listed as KEV, and the provided sources do not state active exploitation. CVSS indicates unauthenticated network reachability and low attack complexity, but the documented impact is limited to availability degradation of SmartConnect DNS responses.
Researcher notes
The core weakness is CWE-400 resource consumption in SmartConnect DNS error handling. Evidence provided does not include exploit details, fixed version numbers, or confirmed exploitation. Validate exposure through version inventory and SmartConnect DNS reachability, then defer remediation specifics to Dell guidance.
Mitigation direction
- Review Dell advisory DSA-2020-054 for vendor-supported fixes or workarounds.
- Identify and prioritize OneFS systems running version 8.2.2 or earlier.
- Limit SmartConnect DNS exposure to trusted networks where operationally feasible.
- Monitor SmartConnect DNS health, CPU usage, and DNS response failures.
- Plan remediation first for storage clusters supporting critical applications.
Validation and detection
- Inventory Dell EMC Isilon OneFS versions across all clusters.
- Confirm whether SmartConnect DNS is enabled and network reachable.
- Compare installed versions against Dell DSA-2020-054 guidance.
- Review monitoring for CPU spikes or SmartConnect DNS response failures.
- Confirm remediation status after applying vendor guidance.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-400: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2020-5347 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L3.91.4Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
5.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source materials
- CVE List V5 sourceCVE List V5
- https://www.dell.com/support/security/en-us/details/542190/DSA-2020-054-Dell-EMC-Isilon-OneFS-Security-Update-for-DNS-Protocol-VulnerabilitiesCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Uncontrolled Resource Consumption
Uncontrolled Resource Consumption represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.