CVE-2023-45084
05.12.2023, 17:15
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.Enginsight
| Vendor | Product | Version |
|---|---|---|
| softiron | hypercloud | 1.0 ≤ 𝑥 < 2.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-820 - Missing SynchronizationThe software utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.
- CWE-662 - Improper SynchronizationThe software utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.