Lucene search

[email protected]NVD:CVE-2023-23689

HistoryFeb 28, 2023 - 5:15 p.m.

CVE-2023-23689

2023-02-2817:15:11

CWE-400

[email protected]

web.nvd.nist.gov

dell powerscale

hardware management

uncontrolled resource consumption

onefs

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

JSON

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Affected configurations

NVD

Node

della200_firmwareMatch9.0.0.0

della200_firmwareMatch9.1.0.0

della200_firmwareMatch9.2.0.0

della200_firmwareMatch9.2.1.0

della200_firmwareMatch9.3.0.0

della200_firmwareMatch9.4.0.0

della200_firmwareMatch9.5.0.0

AND

della200Match-

Node

della2000_firmwareMatch9.0.0.0

della2000_firmwareMatch9.1.0.0

della2000_firmwareMatch9.2.0.0

della2000_firmwareMatch9.2.1.0

della2000_firmwareMatch9.3.0.0

della2000_firmwareMatch9.4.0.0

della2000_firmwareMatch9.5.0.0

AND

della2000Match-

Node

dellh400_firmwareMatch9.0.0.0

dellh400_firmwareMatch9.1.0.0

dellh400_firmwareMatch9.2.0.0

dellh400_firmwareMatch9.2.1.0

dellh400_firmwareMatch9.3.0.0

dellh400_firmwareMatch9.4.0.0

dellh400_firmwareMatch9.5.0.0

AND

dellh400Match-

Node

dellh500Match-

AND

dellh500_firmwareMatch9.0.0.0

dellh500_firmwareMatch9.1.0.0

dellh500_firmwareMatch9.2.0.0

dellh500_firmwareMatch9.2.1.0

dellh500_firmwareMatch9.3.0.0

dellh500_firmwareMatch9.4.0.0

dellh500_firmwareMatch9.5.0.0

Node

dellh600Match-

AND

dellh600_firmwareMatch9.0.0.0

dellh600_firmwareMatch9.1.0.0

dellh600_firmwareMatch9.2.0.0

dellh600_firmwareMatch9.2.1.0

dellh600_firmwareMatch9.3.0.0

dellh600_firmwareMatch9.4.0.0

dellh600_firmwareMatch9.5.0.0

Node

dellh5600Match-

AND

dellh5600_firmwareMatch9.0.0.0

dellh5600_firmwareMatch9.1.0.0

dellh5600_firmwareMatch9.2.0.0

dellh5600_firmwareMatch9.2.1.0

dellh5600_firmwareMatch9.3.0.0

dellh5600_firmwareMatch9.4.0.0

dellh5600_firmwareMatch9.5.0.0

Node

dellf800Match-

AND

dellf800_firmwareMatch9.0.0.0

dellf800_firmwareMatch9.1.0.0

dellf800_firmwareMatch9.2.0.0

dellf800_firmwareMatch9.2.1.0

dellf800_firmwareMatch9.3.0.0

dellf800_firmwareMatch9.4.0.0

dellf800_firmwareMatch9.5.0.0

Node

dellf810Match-

AND

dellf810_firmwareMatch9.0.0.0

dellf810_firmwareMatch9.1.0.0

dellf810_firmwareMatch9.2.0.0

dellf810_firmwareMatch9.2.1.0

dellf810_firmwareMatch9.3.0.0

dellf810_firmwareMatch9.4.0.0

dellf810_firmwareMatch9.5.0.0

References

www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

JSON

Related for NVD:CVE-2023-23689

prion1 cve1 cnvd1 cvelist1