CVE-2023-45084: Media caddy removal and reinsertion without reboot may cause data loss
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity.
This issue only impacts SoftIron HyperCloud "density" storage nodes running HyperCloud software versions 1.0 to before 2.0.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45084?
CVE-2023-45084 has a high severity due to its potential impact on data integrity and availability.
How do I fix CVE-2023-45084?
To fix CVE-2023-45084, ensure that you upgrade your SoftIron HyperCloud to version 2.0.3 or later.
What happens if I do not address CVE-2023-45084?
Ignoring CVE-2023-45084 could result in unwarranted data loss if drive caddies are removed and reintegrated without a reboot.
Which versions of SoftIron HyperCloud are affected by CVE-2023-45084?
CVE-2023-45084 affects all versions of SoftIron HyperCloud from 1.0 to 2.0.2.
What is the cause of CVE-2023-45084?
CVE-2023-45084 is caused by a synchronization flaw that occurs during the removal and reinsertion of drive caddies.