CVE-2023-45084CWE-820

Media caddy removal and reinsertion without reboot may cause data loss

High · published December 5, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity.

This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Weakness
CWE-820 · Missing Synchronization
Published
2023-12-05T16:15Z
EPSS history
Timeline
  • 05 DEC 16:15Z
    Media caddy removal and reinsertion without reboot may cause data loss
    cvelistv5