7.5

CVE-2023-23689

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ A200 Firmware Version 9.0.0.0
   Dell ≫ A200 Version -
Dell ≫ A200 Firmware Version 9.1.0.0
   Dell ≫ A200 Version -
Dell ≫ A200 Firmware Version 9.2.0.0
   Dell ≫ A200 Version -
Dell ≫ A200 Firmware Version 9.2.1.0
   Dell ≫ A200 Version -
Dell ≫ A200 Firmware Version 9.3.0.0
   Dell ≫ A200 Version -
Dell ≫ A200 Firmware Version 9.4.0.0
   Dell ≫ A200 Version -
Dell ≫ A200 Firmware Version 9.5.0.0
   Dell ≫ A200 Version -
Dell ≫ A2000 Firmware Version 9.0.0.0
   Dell ≫ A2000 Version -
Dell ≫ A2000 Firmware Version 9.1.0.0
   Dell ≫ A2000 Version -
Dell ≫ A2000 Firmware Version 9.2.0.0
   Dell ≫ A2000 Version -
Dell ≫ A2000 Firmware Version 9.2.1.0
   Dell ≫ A2000 Version -
Dell ≫ A2000 Firmware Version 9.3.0.0
   Dell ≫ A2000 Version -
Dell ≫ A2000 Firmware Version 9.4.0.0
   Dell ≫ A2000 Version -
Dell ≫ A2000 Firmware Version 9.5.0.0
   Dell ≫ A2000 Version -
Dell ≫ H400 Firmware Version 9.0.0.0
   Dell ≫ H400 Version -
Dell ≫ H400 Firmware Version 9.1.0.0
   Dell ≫ H400 Version -
Dell ≫ H400 Firmware Version 9.2.0.0
   Dell ≫ H400 Version -
Dell ≫ H400 Firmware Version 9.2.1.0
   Dell ≫ H400 Version -
Dell ≫ H400 Firmware Version 9.3.0.0
   Dell ≫ H400 Version -
Dell ≫ H400 Firmware Version 9.4.0.0
   Dell ≫ H400 Version -
Dell ≫ H400 Firmware Version 9.5.0.0
   Dell ≫ H400 Version -
Dell ≫ H500 Firmware Version 9.0.0.0
   Dell ≫ H500 Version -
Dell ≫ H500 Firmware Version 9.1.0.0
   Dell ≫ H500 Version -
Dell ≫ H500 Firmware Version 9.2.0.0
   Dell ≫ H500 Version -
Dell ≫ H500 Firmware Version 9.2.1.0
   Dell ≫ H500 Version -
Dell ≫ H500 Firmware Version 9.3.0.0
   Dell ≫ H500 Version -
Dell ≫ H500 Firmware Version 9.4.0.0
   Dell ≫ H500 Version -
Dell ≫ H500 Firmware Version 9.5.0.0
   Dell ≫ H500 Version -
Dell ≫ H600 Firmware Version 9.0.0.0
   Dell ≫ H600 Version -
Dell ≫ H600 Firmware Version 9.1.0.0
   Dell ≫ H600 Version -
Dell ≫ H600 Firmware Version 9.2.0.0
   Dell ≫ H600 Version -
Dell ≫ H600 Firmware Version 9.2.1.0
   Dell ≫ H600 Version -
Dell ≫ H600 Firmware Version 9.3.0.0
   Dell ≫ H600 Version -
Dell ≫ H600 Firmware Version 9.4.0.0
   Dell ≫ H600 Version -
Dell ≫ H600 Firmware Version 9.5.0.0
   Dell ≫ H600 Version -
Dell ≫ H5600 Firmware Version 9.0.0.0
   Dell ≫ H5600 Version -
Dell ≫ H5600 Firmware Version 9.1.0.0
   Dell ≫ H5600 Version -
Dell ≫ H5600 Firmware Version 9.2.0.0
   Dell ≫ H5600 Version -
Dell ≫ H5600 Firmware Version 9.2.1.0
   Dell ≫ H5600 Version -
Dell ≫ H5600 Firmware Version 9.3.0.0
   Dell ≫ H5600 Version -
Dell ≫ H5600 Firmware Version 9.4.0.0
   Dell ≫ H5600 Version -
Dell ≫ H5600 Firmware Version 9.5.0.0
   Dell ≫ H5600 Version -
Dell ≫ F800 Firmware Version 9.0.0.0
   Dell ≫ F800 Version -
Dell ≫ F800 Firmware Version 9.1.0.0
   Dell ≫ F800 Version -
Dell ≫ F800 Firmware Version 9.2.0.0
   Dell ≫ F800 Version -
Dell ≫ F800 Firmware Version 9.2.1.0
   Dell ≫ F800 Version -
Dell ≫ F800 Firmware Version 9.3.0.0
   Dell ≫ F800 Version -
Dell ≫ F800 Firmware Version 9.4.0.0
   Dell ≫ F800 Version -
Dell ≫ F800 Firmware Version 9.5.0.0
   Dell ≫ F800 Version -
Dell ≫ F810 Firmware Version 9.0.0.0
   Dell ≫ F810 Version -
Dell ≫ F810 Firmware Version 9.1.0.0
   Dell ≫ F810 Version -
Dell ≫ F810 Firmware Version 9.2.0.0
   Dell ≫ F810 Version -
Dell ≫ F810 Firmware Version 9.2.1.0
   Dell ≫ F810 Version -
Dell ≫ F810 Firmware Version 9.3.0.0
   Dell ≫ F810 Version -
Dell ≫ F810 Firmware Version 9.4.0.0
   Dell ≫ F810 Version -
Dell ≫ F810 Firmware Version 9.5.0.0
   Dell ≫ F810 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.448
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EMC 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security
Patch
Vendor Advisory