« Volver al listado

CVE-2023-45084

Estado: ModificadaMedia (6.1)—

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity.

This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Softiron — Hypercloud

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-45084",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-45084",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-02T17:07:33.548046Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "0a72a055-908d-47f5-a16a-1f09049c16c6",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7,
          "attackVector": "PHYSICAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 0.7
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "0a72a055-908d-47f5-a16a-1f09049c16c6",
      "affectedData": [
        {
          "vendor": "SoftIron",
          "product": "HyperCloud",
          "versions": [
            {
              "status": "affected",
              "version": "1.0",
              "lessThan": "2.0.3",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-12-05T17:15:08.183",
  "references": [
    {
      "url": "https://advisories.softiron.cloud",
      "tags": [
        "Release Notes"
      ],
      "source": "0a72a055-908d-47f5-a16a-1f09049c16c6"
    },
    {
      "url": "https://advisories.softiron.cloud",
      "tags": [
        "Release Notes"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "0a72a055-908d-47f5-a16a-1f09049c16c6",
      "description": [
        {
          "lang": "en",
          "value": "CWE-820"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-662"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity.\n\nThis issue only impacts SoftIron HyperCloud \"density\" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.\n\n"
    },
    {
      "lang": "es",
      "value": "Existe un problema en SoftIron HyperCloud donde la extracción y reinserción del drive caddy sin reiniciar puede hacer que el sistema reconozca erróneamente el caddy como un medio nuevo y borre todos los datos de las unidades debido a una falla de sincronización faltante, lo que afecta la disponibilidad e integridad de los datos. Este problema solo afecta a los nodos de almacenamiento de \"density\" de SoftIron HyperCloud que ejecutan el software HyperCloud desde la versión 1.0 hasta la 2.0.3 anterior."
    }
  ],
  "lastModified": "2026-06-17T06:28:13.613",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:softiron:hypercloud:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E1D94F5-3EE0-4D00-BF00-C08BB922F813",
              "versionEndExcluding": "2.0.3",
              "versionStartIncluding": "1.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "0a72a055-908d-47f5-a16a-1f09049c16c6"
}