SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-45085

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process.

LOW 3.3EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process.  In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window. This issue impacts HyperCloud versions from 2.0.0 to before 2.0.3.

CVSS 3.1
3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS
0.21% probability · 12th percentile
CISA KEV
Not listed
Weakness
CWE-665
Affected
softiron/hypercloud
Source
0a72a055-908d-47f5-a16a-1f09049c16c6

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.