CVE-2023-4333: Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
Published Aug 15, 2023
·Updated
Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
Affected Software
4 affected components
All of the following
Broadcom RAID Controller web interface=51.12.0-2779
Microsoft Windows
Broadcom RAID Controller web interface=51.12.0-2779
Microsoft Windows
Remediation
Information
This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
Event History
Aug 15, 2023
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of the Broadcom RAID Controller web interface issue?
The vulnerability ID is CVE-2023-4333.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server'.
3
What is the severity of the vulnerability?
The severity of the vulnerability is medium with a severity value of 5.5.
4
Which software is affected by the Broadcom RAID Controller web interface vulnerability?
The Broadcom RAID Controller web interface version 51.12.0-2779 is affected.
5
How can I fix the Broadcom RAID Controller web interface vulnerability?
To fix the vulnerability, it is recommended to apply the latest patch or update provided by Broadcom.