CVE-2023-45085: When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-05 · updated 2026-06-17
Weakness: CWE-665

Description

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window. This issue impacts HyperCloud versions from 2.0.0 to before 2.0.3.

Affected products

SoftIron HyperCloud: from 2.0.0 before 2.0.3 — fixed in 2.0.3

How to fix

Upgrade to a fixed version: SoftIron HyperCloud 2.0.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-45085 or the next vulnerability affects your stack