Read the docs
TI-2023-24130 Aliases CVE-2023-45085GHSA-x59m-44wq-64w5

When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"

Priority LOW 15CWE-1419Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process.  In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window. This issue impacts HyperCloud versions from 2.0.0 to before 2.0.3.

Why it matters now

EPSS 0.00213 11th percentileScored 2026-11-07
Fix Fixed HyperCloud (SoftIron): 2.0.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SoftIronHyperCloud2.0.0 to before 2.0.32.0.3Patch availableCNA
  • HyperCloud VendorSoftIron Affected 2.0.0 to before 2.0.3 Fixed in 2.0.3 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:softiron:hypercloud:*:*:*:*:*:*:*:*2.0.0 to before 2.0.3VulnerableSoftIron
  • cpe:2.3:a:softiron:hypercloud:*:*:*:*:*:*:*:* Versions 2.0.0 to before 2.0.3 Vulnerable ·SoftIron

Remediation

  • Fix · CNA HyperCloud (SoftIron) Fixed in 2.0.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SoftIron HyperCloud 2.0.3

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2023-24129 Media caddy removal and reinsertion without reboot may cause data lossPriority LOW 30
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-45085
  2. 2026-10-03 Alias added: GHSA-x59m-44wq-64w5

References

Other 1

  • TI-2023-24129 Media caddy removal and reinsertion without reboot may cause data loss CVSS 3.1HIGH 7.0
  • TI-2023-24128 HyperCloud: "admin" and "serveradmin" users can be deleted CVSS 3.1MEDIUM 4.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences