CVE-2023-4328: Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
Published Aug 15, 2023
·Updated
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows
Affected Software
4 affected components
All of the following
Broadcom RAID Controller web interface=51.12.0-2779
Linux Linux kernel
Broadcom RAID Controller web interface=51.12.0-2779
Linux Linux kernel
Remediation
Information
This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
Event History
Aug 15, 2023
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-4328?
CVE-2023-4328 is a vulnerability in the Broadcom RAID Controller web interface that allows for exposure of sensitive data and access to encryption keys by any local user on Windows.
2
How severe is CVE-2023-4328?
CVE-2023-4328 has a severity rating of 5.5, which is considered medium.
3
Which software is affected by CVE-2023-4328?
The Broadcom RAID Controller web interface version 51.12.0-2779 is affected by CVE-2023-4328.
4
Is Linux Kernel affected by CVE-2023-4328?
No, the Linux Kernel is not vulnerable to CVE-2023-4328.
5
How can I fix CVE-2023-4328?
To fix CVE-2023-4328, you should install the latest update provided by Broadcom for the RAID Controller web interface.