Vulnerability · Published Dec 5, 2023 · Assigned by SoftIron
CVE-2023-45085When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"
Low 3.2
In plain English
A low-severity security flaw in HyperCloud from SoftIron. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Official description
An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window. This issue impacts HyperCloud versions from 2.0.0 to before 2.0.3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SoftIron | HyperCloud | 2.0.0 – before 2.0.3 |
Weakness: CWE-1419 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L