CVE-2023-45084highCWE-820

CVE-2023-45084: falha de alta gravidade em SoftIron HyperCloud

Media caddy removal and reinsertion without reboot may cause data loss

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar HyperCloud

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.2%
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
Produtos afetados
SoftIron · HyperCloud
CVEs relacionadas — SoftIron HyperCloud

No mesmo produto, das mais perigosas para as menos.

CVE-2026-116755HIGHSoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template FieldsEPSS 0.9%CVE-2024-13058MEDIUMAuthenticated, non-admin users can create storage pools via the sifi APIEPSS 0.4%CVE-2026-1842MEDIUMHyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized AccessEPSS 0.2%CVE-2023-45083MEDIUMHyperCloud: "admin" and "serveradmin" users can be deletedEPSS 0.2%CVE-2023-45085LOWWhen compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"EPSS 0.2%CVE-2025-10650LOWImproper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative UsersEPSS 0.1%