PT-2023-19133 · Dell · Dell Powerscale

CVE-2023-23689 · Publicado 2023-02-28 · Atualizado 2023-03-09

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 (affected versions not specified)

Description The integrated hardware management software in Dell PowerScale nodes contains an uncontrolled resource consumption issue. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger the OneFS data protection mechanism, causing a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2023-23689

Produtos afetados

Dell Powerscale

Referências · 4

• https://dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-23689 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-23689 · Aviso do Fabricante
• https://t.me/cibsecurity/59132 · Publicação no Telegram