What’s Vulnerable › Vulnerabilities

CVE-2023-23689

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-28 · updated 2026-06-17
• Weakness: CWE-400

Description

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Affected products

• Dell A2000 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell A200 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell F800 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell F810 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell H400 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell H500 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell H5600 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)
• Dell H600 Firmware: 9.0.0.0, 9.1.0.0, 9.2.0.0, 9.2.1.0, 9.3.0.0, 9.4.0.0 (+1)

References

• https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security
• https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security

Get alerted when CVE-2023-23689 or the next vulnerability affects your stack