CVE-2023-45085lowCWE-1419

CVE-2023-45085: fallo de gravedad baja en SoftIron HyperCloud

When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear HyperCloud

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.2epss 0.2%
An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process.  In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window. This issue impacts HyperCloud versions from 2.0.0 to before 2.0.3.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L
Productos afectados
SoftIron · HyperCloud
CVEs relacionadas — SoftIron HyperCloud

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-116755HIGHSoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template FieldsEPSS 0.9%CVE-2024-13058MEDIUMAuthenticated, non-admin users can create storage pools via the sifi APIEPSS 0.4%CVE-2026-1842MEDIUMHyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized AccessEPSS 0.2%CVE-2023-45083MEDIUMHyperCloud: "admin" and "serveradmin" users can be deletedEPSS 0.2%CVE-2023-45084HIGHMedia caddy removal and reinsertion without reboot may cause data lossEPSS 0.2%CVE-2025-10650LOWImproper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative UsersEPSS 0.1%