Lucene search

[email protected]NVD:CVE-2023-23689

HistoryFeb 28, 2023 - 5:15 p.m.

CVE-2023-23689

2023-02-2817:15:11

CWE-400

[email protected]

web.nvd.nist.gov

dell powerscale

hardware management

uncontrolled resource consumption

onefs

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

38.9%

JSON

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Affected configurations

Nvd

Node

della200_firmwareMatch9.0.0.0

della200_firmwareMatch9.1.0.0

della200_firmwareMatch9.2.0.0

della200_firmwareMatch9.2.1.0

della200_firmwareMatch9.3.0.0

della200_firmwareMatch9.4.0.0

della200_firmwareMatch9.5.0.0

AND

della200Match-

Node

della2000_firmwareMatch9.0.0.0

della2000_firmwareMatch9.1.0.0

della2000_firmwareMatch9.2.0.0

della2000_firmwareMatch9.2.1.0

della2000_firmwareMatch9.3.0.0

della2000_firmwareMatch9.4.0.0

della2000_firmwareMatch9.5.0.0

AND

della2000Match-

Node

dellh400_firmwareMatch9.0.0.0

dellh400_firmwareMatch9.1.0.0

dellh400_firmwareMatch9.2.0.0

dellh400_firmwareMatch9.2.1.0

dellh400_firmwareMatch9.3.0.0

dellh400_firmwareMatch9.4.0.0

dellh400_firmwareMatch9.5.0.0

AND

dellh400Match-

Node

dellh500Match-

AND

dellh500_firmwareMatch9.0.0.0

dellh500_firmwareMatch9.1.0.0

dellh500_firmwareMatch9.2.0.0

dellh500_firmwareMatch9.2.1.0

dellh500_firmwareMatch9.3.0.0

dellh500_firmwareMatch9.4.0.0

dellh500_firmwareMatch9.5.0.0

Node

dellh600Match-

AND

dellh600_firmwareMatch9.0.0.0

dellh600_firmwareMatch9.1.0.0

dellh600_firmwareMatch9.2.0.0

dellh600_firmwareMatch9.2.1.0

dellh600_firmwareMatch9.3.0.0

dellh600_firmwareMatch9.4.0.0

dellh600_firmwareMatch9.5.0.0

Node

dellh5600Match-

AND

dellh5600_firmwareMatch9.0.0.0

dellh5600_firmwareMatch9.1.0.0

dellh5600_firmwareMatch9.2.0.0

dellh5600_firmwareMatch9.2.1.0

dellh5600_firmwareMatch9.3.0.0

dellh5600_firmwareMatch9.4.0.0

dellh5600_firmwareMatch9.5.0.0

Node

dellf800Match-

AND

dellf800_firmwareMatch9.0.0.0

dellf800_firmwareMatch9.1.0.0

dellf800_firmwareMatch9.2.0.0

dellf800_firmwareMatch9.2.1.0

dellf800_firmwareMatch9.3.0.0

dellf800_firmwareMatch9.4.0.0

dellf800_firmwareMatch9.5.0.0

Node

dellf810Match-

AND

dellf810_firmwareMatch9.0.0.0

dellf810_firmwareMatch9.1.0.0

dellf810_firmwareMatch9.2.0.0

dellf810_firmwareMatch9.2.1.0

dellf810_firmwareMatch9.3.0.0

dellf810_firmwareMatch9.4.0.0

dellf810_firmwareMatch9.5.0.0

VendorProductVersionCPE
della200_firmware9.0.0.0cpe:2.3:o:dell:a200_firmware:9.0.0.0:*:*:*:*:*:*:*
della200_firmware9.1.0.0cpe:2.3:o:dell:a200_firmware:9.1.0.0:*:*:*:*:*:*:*
della200_firmware9.2.0.0cpe:2.3:o:dell:a200_firmware:9.2.0.0:*:*:*:*:*:*:*
della200_firmware9.2.1.0cpe:2.3:o:dell:a200_firmware:9.2.1.0:*:*:*:*:*:*:*
della200_firmware9.3.0.0cpe:2.3:o:dell:a200_firmware:9.3.0.0:*:*:*:*:*:*:*
della200_firmware9.4.0.0cpe:2.3:o:dell:a200_firmware:9.4.0.0:*:*:*:*:*:*:*
della200_firmware9.5.0.0cpe:2.3:o:dell:a200_firmware:9.5.0.0:*:*:*:*:*:*:*
della200-cpe:2.3:h:dell:a200:-:*:*:*:*:*:*:*
della2000_firmware9.0.0.0cpe:2.3:o:dell:a2000_firmware:9.0.0.0:*:*:*:*:*:*:*
della2000_firmware9.1.0.0cpe:2.3:o:dell:a2000_firmware:9.1.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	a200_firmware	9.0.0.0	cpe:2.3:o:dell:a200_firmware:9.0.0.0:::::::*
dell	a200_firmware	9.1.0.0	cpe:2.3:o:dell:a200_firmware:9.1.0.0:::::::*
dell	a200_firmware	9.2.0.0	cpe:2.3:o:dell:a200_firmware:9.2.0.0:::::::*
dell	a200_firmware	9.2.1.0	cpe:2.3:o:dell:a200_firmware:9.2.1.0:::::::*
dell	a200_firmware	9.3.0.0	cpe:2.3:o:dell:a200_firmware:9.3.0.0:::::::*
dell	a200_firmware	9.4.0.0	cpe:2.3:o:dell:a200_firmware:9.4.0.0:::::::*
dell	a200_firmware	9.5.0.0	cpe:2.3:o:dell:a200_firmware:9.5.0.0:::::::*
dell	a200	-	cpe:2.3:h:dell:a200:-:::::::*
dell	a2000_firmware	9.0.0.0	cpe:2.3:o:dell:a2000_firmware:9.0.0.0:::::::*
dell	a2000_firmware	9.1.0.0	cpe:2.3:o:dell:a2000_firmware:9.1.0.0:::::::*

Rows per page:

1-10 of 641

References

www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

38.9%

JSON

Related for NVD:CVE-2023-23689

prion1 cve1 cnvd1 cvelist1