CVE-2023-4324: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Published Aug 15, 2023

Updated

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Affected Software

1 affected component

Broadcom RAID Controller web interface=51.12.0-2779

Remediation

Information

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.

Event History

Aug 15, 2023

CVE Published

via MITRE·06:25 PM

Data Sourced

via MITRE·06:25 PM

RemedyDescription

Data Sourced

via NVD·07:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2023-4324?

CVE-2023-4324 is a vulnerability found in the Broadcom RAID Controller web interface due to insecure defaults of lacking HTTP Content-Security-Policy headers.

How severe is CVE-2023-4324?

CVE-2023-4324 has a severity score of 9.8 out of 10, indicating a critical vulnerability.

How does CVE-2023-4324 affect the Broadcom RAID Controller web interface?

CVE-2023-4324 exposes the Broadcom RAID Controller web interface to potential attacks due to the absence of HTTP Content-Security-Policy headers.

How can I fix CVE-2023-4324?

To fix CVE-2023-4324, it is recommended to update the Broadcom RAID Controller web interface to a version that includes HTTP Content-Security-Policy headers.

Where can I find more information about CVE-2023-4324?

For more information about CVE-2023-4324, you can visit the Broadcom Product Security Center at https://www.broadcom.com/support/resources/product-security-center.