Softiron
Monthly
SoftIron HyperCloud Orchestrator versions 1.0 through 2.6.17 allow an authenticated user with management-plane access to inject shell content through virtual machine template fields such as the VM DESCRIPTION, resulting in arbitrary operating system command execution on hypervisor hosts as the privileged orchestration user during deploy, migrate, or network setup operations. Exploitation is access-gated: it requires valid credentials, adjacent-network access to the management plane, and a qualifying VM lifecycle operation, and merely owning a virtual machine is not sufficient. No public exploit was identified at time of analysis, and the vendor-released fix is version 2.6.18.
An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.
SoftIron HyperCloud Orchestrator versions 1.0 through 2.6.17 allow an authenticated user with management-plane access to inject shell content through virtual machine template fields such as the VM DESCRIPTION, resulting in arbitrary operating system command execution on hypervisor hosts as the privileged orchestration user during deploy, migrate, or network setup operations. Exploitation is access-gated: it requires valid credentials, adjacent-network access to the management plane, and a qualifying VM lifecycle operation, and merely owning a virtual machine is not sufficient. No public exploit was identified at time of analysis, and the vendor-released fix is version 2.6.18.
An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.