SoftIron

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SoftIron records in CISA KEV

No SoftIron vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hypercloud 3 records LOW

Records

3 records in Hypercloud · all components

TI-2023-24129 CVE-2023-45084 · GHSA-4rj3-h5c4-jprh

Media caddy removal and reinsertion without reboot may cause data loss

LOW 30

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing sync…

CVSS 3.1HIGH 7.0 Physical No auth User interaction EPSS 0.00224 Published 2023-12-05 Fixed in 2.0.3 CWE-820

TI-2023-24128 CVE-2023-45083 · GHSA-37pw-72qc-wmmj

HyperCloud: "admin" and "serveradmin" users can be deleted

LOW 20

An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00236 Published 2023-12-05 Fixed in 2.1 CWE-269

TI-2023-24130 CVE-2023-45085 · GHSA-x59m-44wq-64w5

When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"

LOW 15

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00213 Published 2023-12-05 Fixed in 2.0.3 CWE-1419

Open these records in search →

Critical	0
High	2
Medium	3
Low	2
No CVSS	0