CVE-2023-4341: Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Published Aug 15, 2023

Updated

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Affected Software

1 affected component

Broadcom RAID Controller web interface=51.12.0-2779

Remediation

Information

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.

Event History

Aug 15, 2023

CVE Published

via MITRE·06:25 PM

Data Sourced

via MITRE·06:25 PM

RemedyDescription

Data Sourced

via NVD·07:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2023-4341?

CVE-2023-4341 is a vulnerability in the Broadcom RAID Controller web interface that allows for privilege escalation to root due to the creation of insecure folders.

How severe is the vulnerability CVE-2023-4341?

The severity of the vulnerability CVE-2023-4341 is classified as critical with a severity score of 9.8 out of 10.

What is the affected software?

The affected software is the Broadcom RAID Controller web interface version 51.12.0-2779.

How can I fix the vulnerability CVE-2023-4341?

To fix the vulnerability CVE-2023-4341, it is recommended to apply the latest security patches or updates provided by Broadcom.

Where can I find more information about the vulnerability CVE-2023-4341?

You can find more information about the vulnerability CVE-2023-4341 on the Broadcom Product Security Center website: [link](https://www.broadcom.com/support/resources/product-security-center)