Strix
26.1K

CVE-2023-23689

HIGHCVSS 7.5/10EPSS 0.62%

Last modified

CVE-2023-23689 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service. . EPSS estimates a 0.62% chance of exploitation in the next 30 days.

Description

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.62%

44.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
DellA200 Firmware9.0.0.0
DellA200 Firmware9.1.0.0
DellA200 Firmware9.2.0.0
DellA200 Firmware9.2.1.0
DellA200 Firmware9.3.0.0
DellA200 Firmware9.4.0.0
DellA200 Firmware9.5.0.0
DellA2000 Firmware9.0.0.0
DellA2000 Firmware9.1.0.0
DellA2000 Firmware9.2.0.0
DellA2000 Firmware9.2.1.0
DellA2000 Firmware9.3.0.0
DellA2000 Firmware9.4.0.0
DellA2000 Firmware9.5.0.0
DellH400 Firmware9.0.0.0
DellH400 Firmware9.1.0.0
DellH400 Firmware9.2.0.0
DellH400 Firmware9.2.1.0
DellH400 Firmware9.3.0.0
DellH400 Firmware9.4.0.0
DellH400 Firmware9.5.0.0
DellH500 Firmware9.0.0.0
DellH500 Firmware9.1.0.0
DellH500 Firmware9.2.0.0
DellH500 Firmware9.2.1.0
DellH500 Firmware9.3.0.0
DellH500 Firmware9.4.0.0
DellH500 Firmware9.5.0.0
DellH600 Firmware9.0.0.0
DellH600 Firmware9.1.0.0
DellH600 Firmware9.2.0.0
DellH600 Firmware9.2.1.0
DellH600 Firmware9.3.0.0
DellH600 Firmware9.4.0.0
DellH600 Firmware9.5.0.0
DellH5600 Firmware9.0.0.0
DellH5600 Firmware9.1.0.0
DellH5600 Firmware9.2.0.0
DellH5600 Firmware9.2.1.0
DellH5600 Firmware9.3.0.0
DellH5600 Firmware9.4.0.0
DellH5600 Firmware9.5.0.0
DellF800 Firmware9.0.0.0
DellF800 Firmware9.1.0.0
DellF800 Firmware9.2.0.0
DellF800 Firmware9.2.1.0
DellF800 Firmware9.3.0.0
DellF800 Firmware9.4.0.0
DellF800 Firmware9.5.0.0
DellF810 Firmware9.0.0.0

Showing 50 of 56 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-23689?
Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.
How severe is CVE-2023-23689?
CVE-2023-23689 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.62% probability of exploitation in the next 30 days.
How do I fix CVE-2023-23689?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-23689?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST