CVE-2023-23689: Dell a2000 Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.

Affected products

• Dell a2000 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell a200 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell f800 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell f810 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell h400 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell h500 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell h5600 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …
• Dell h600 Firmware: version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0.0 only; version 9.2.1.0 only; version 9.3.0.0 only; version 9.4.0.0 only; …

Published 2023-02-28. Last modified 2026-06-17.