7
CVE-2023-45084
- EPSS 0.03%
- Veröffentlicht 05.12.2023 17:15:08
- Zuletzt bearbeitet 21.11.2024 08:26:21
- Quelle 0a72a055-908d-47f5-a16a-1f0904
- CVE-Watchlists
- Unerledigt
LoginAn issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Softiron ≫ Hypercloud Version >= 1.0 < 2.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.075 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 0.9 | 5.2 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
| 0a72a055-908d-47f5-a16a-1f09049c16c6 | 7 | 0.7 | 5.8 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
|
CWE-662 Improper Synchronization
The product utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.
CWE-820 Missing Synchronization
The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.