7.5

CVE-2023-23689

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Data is provided by the National Vulnerability Database (NVD)
Dell ≫ A200 Firmware Version9.0.0.0
   Dell ≫ A200 Version-
Dell ≫ A200 Firmware Version9.1.0.0
   Dell ≫ A200 Version-
Dell ≫ A200 Firmware Version9.2.0.0
   Dell ≫ A200 Version-
Dell ≫ A200 Firmware Version9.2.1.0
   Dell ≫ A200 Version-
Dell ≫ A200 Firmware Version9.3.0.0
   Dell ≫ A200 Version-
Dell ≫ A200 Firmware Version9.4.0.0
   Dell ≫ A200 Version-
Dell ≫ A200 Firmware Version9.5.0.0
   Dell ≫ A200 Version-
Dell ≫ A2000 Firmware Version9.0.0.0
   Dell ≫ A2000 Version-
Dell ≫ A2000 Firmware Version9.1.0.0
   Dell ≫ A2000 Version-
Dell ≫ A2000 Firmware Version9.2.0.0
   Dell ≫ A2000 Version-
Dell ≫ A2000 Firmware Version9.2.1.0
   Dell ≫ A2000 Version-
Dell ≫ A2000 Firmware Version9.3.0.0
   Dell ≫ A2000 Version-
Dell ≫ A2000 Firmware Version9.4.0.0
   Dell ≫ A2000 Version-
Dell ≫ A2000 Firmware Version9.5.0.0
   Dell ≫ A2000 Version-
Dell ≫ H400 Firmware Version9.0.0.0
   Dell ≫ H400 Version-
Dell ≫ H400 Firmware Version9.1.0.0
   Dell ≫ H400 Version-
Dell ≫ H400 Firmware Version9.2.0.0
   Dell ≫ H400 Version-
Dell ≫ H400 Firmware Version9.2.1.0
   Dell ≫ H400 Version-
Dell ≫ H400 Firmware Version9.3.0.0
   Dell ≫ H400 Version-
Dell ≫ H400 Firmware Version9.4.0.0
   Dell ≫ H400 Version-
Dell ≫ H400 Firmware Version9.5.0.0
   Dell ≫ H400 Version-
Dell ≫ H500 Firmware Version9.0.0.0
   Dell ≫ H500 Version-
Dell ≫ H500 Firmware Version9.1.0.0
   Dell ≫ H500 Version-
Dell ≫ H500 Firmware Version9.2.0.0
   Dell ≫ H500 Version-
Dell ≫ H500 Firmware Version9.2.1.0
   Dell ≫ H500 Version-
Dell ≫ H500 Firmware Version9.3.0.0
   Dell ≫ H500 Version-
Dell ≫ H500 Firmware Version9.4.0.0
   Dell ≫ H500 Version-
Dell ≫ H500 Firmware Version9.5.0.0
   Dell ≫ H500 Version-
Dell ≫ H600 Firmware Version9.0.0.0
   Dell ≫ H600 Version-
Dell ≫ H600 Firmware Version9.1.0.0
   Dell ≫ H600 Version-
Dell ≫ H600 Firmware Version9.2.0.0
   Dell ≫ H600 Version-
Dell ≫ H600 Firmware Version9.2.1.0
   Dell ≫ H600 Version-
Dell ≫ H600 Firmware Version9.3.0.0
   Dell ≫ H600 Version-
Dell ≫ H600 Firmware Version9.4.0.0
   Dell ≫ H600 Version-
Dell ≫ H600 Firmware Version9.5.0.0
   Dell ≫ H600 Version-
Dell ≫ H5600 Firmware Version9.0.0.0
   Dell ≫ H5600 Version-
Dell ≫ H5600 Firmware Version9.1.0.0
   Dell ≫ H5600 Version-
Dell ≫ H5600 Firmware Version9.2.0.0
   Dell ≫ H5600 Version-
Dell ≫ H5600 Firmware Version9.2.1.0
   Dell ≫ H5600 Version-
Dell ≫ H5600 Firmware Version9.3.0.0
   Dell ≫ H5600 Version-
Dell ≫ H5600 Firmware Version9.4.0.0
   Dell ≫ H5600 Version-
Dell ≫ H5600 Firmware Version9.5.0.0
   Dell ≫ H5600 Version-
Dell ≫ F800 Firmware Version9.0.0.0
   Dell ≫ F800 Version-
Dell ≫ F800 Firmware Version9.1.0.0
   Dell ≫ F800 Version-
Dell ≫ F800 Firmware Version9.2.0.0
   Dell ≫ F800 Version-
Dell ≫ F800 Firmware Version9.2.1.0
   Dell ≫ F800 Version-
Dell ≫ F800 Firmware Version9.3.0.0
   Dell ≫ F800 Version-
Dell ≫ F800 Firmware Version9.4.0.0
   Dell ≫ F800 Version-
Dell ≫ F800 Firmware Version9.5.0.0
   Dell ≫ F800 Version-
Dell ≫ F810 Firmware Version9.0.0.0
   Dell ≫ F810 Version-
Dell ≫ F810 Firmware Version9.1.0.0
   Dell ≫ F810 Version-
Dell ≫ F810 Firmware Version9.2.0.0
   Dell ≫ F810 Version-
Dell ≫ F810 Firmware Version9.2.1.0
   Dell ≫ F810 Version-
Dell ≫ F810 Firmware Version9.3.0.0
   Dell ≫ F810 Version-
Dell ≫ F810 Firmware Version9.4.0.0
   Dell ≫ F810 Version-
Dell ≫ F810 Firmware Version9.5.0.0
   Dell ≫ F810 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.269
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security_alert@emc.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.