PT-2023-29402 · Softiron · Softiron Hypercloud

Published 2023-12-05 · Updated 2023-12-12 · CVE-2023-45085

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 2.0.0 through 2.0.2

Description An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window.

Recommendations For SoftIron HyperCloud versions 2.0.0 through 2.0.2, update to version 2.0.3 or later to resolve the issue.

Fix

Improper Initialization

Weakness Enumeration

CWE-1419

CWE-665

Related Identifiers

CVE-2023-45085

Affected Products

Softiron Hypercloud

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-45085 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45085 · Vendor Advisory
• https://twitter.com/CVEnew/status/1732080744779149569 · Twitter Post
• https://advisories.softiron.cloud · Note