CVE-2023-23689 : Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrate

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Published 2023-02-28 17:15:11

Updated 2023-03-09 19:06:22

Source Dell

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2023-23689

Dell » A200 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:a200_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A200 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:a200_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A200 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:a200_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A200 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:a200_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A200 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:a200_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A200 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:a200_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A200 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:a200_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A200 » Version: N/A
Dell » A2000 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:a2000_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » A2000 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:a2000_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » A2000 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:a2000_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » A2000 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:a2000_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » A2000 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:a2000_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » A2000 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:a2000_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » A2000 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:a2000_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » A2000 » Version: N/A
Dell » H400 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:h400_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H400 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:h400_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H400 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:h400_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H400 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:h400_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H400 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:h400_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H400 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:h400_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H400 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:h400_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H400 » Version: N/A
Dell » H500 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:h500_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H500 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:h500_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H500 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:h500_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H500 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:h500_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H500 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:h500_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H500 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:h500_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H500 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:h500_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H500 » Version: N/A
Dell » H600 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:h600_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H600 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:h600_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H600 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:h600_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H600 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:h600_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H600 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:h600_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H600 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:h600_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H600 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:h600_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H600 » Version: N/A
Dell » H5600 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:h5600_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » H5600 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:h5600_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » H5600 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:h5600_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » H5600 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:h5600_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » H5600 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:h5600_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » H5600 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:h5600_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » H5600 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:h5600_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » H5600 » Version: N/A
Dell » F800 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:f800_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F800 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:f800_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F800 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:f800_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F800 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:f800_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F800 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:f800_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F800 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:f800_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F800 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:f800_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F800 » Version: N/A
Dell » F810 Firmware » Version: 9.0.0.0
cpe:2.3:o:dell:f810_firmware:9.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A
Dell » F810 Firmware » Version: 9.1.0.0
cpe:2.3:o:dell:f810_firmware:9.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A
Dell » F810 Firmware » Version: 9.2.0.0
cpe:2.3:o:dell:f810_firmware:9.2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A
Dell » F810 Firmware » Version: 9.2.1.0
cpe:2.3:o:dell:f810_firmware:9.2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A
Dell » F810 Firmware » Version: 9.3.0.0
cpe:2.3:o:dell:f810_firmware:9.3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A
Dell » F810 Firmware » Version: 9.4.0.0
cpe:2.3:o:dell:f810_firmware:9.4.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A
Dell » F810 Firmware » Version: 9.5.0.0
cpe:2.3:o:dell:f810_firmware:9.5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » F810 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-23689

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 39 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-23689

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	Dell
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2023-23689

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
Assigned by:
- nvd@nist.gov (Primary)
- security_alert@emc.com (Secondary)

References for CVE-2023-23689

https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security

Access Denied
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-23689

Products affected by CVE-2023-23689

Exploit prediction scoring system (EPSS) score for CVE-2023-23689

CVSS scores for CVE-2023-23689

CWE ids for CVE-2023-23689

References for CVE-2023-23689