Vulnerability · Published Dec 5, 2023 · Assigned by SoftIron
CVE-2023-45084Media caddy removal and reinsertion without reboot may cause data loss
High 7.0
In plain English
A high-severity security flaw in HyperCloud from SoftIron. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Official description
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SoftIron | HyperCloud | 1.0 – before 2.0.3 |
Weakness: CWE-820 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H