CVE-2023-4344: Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Published Aug 15, 2023
·Updated
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Affected Software
1 affected component
Broadcom RAID Controller web interface=51.12.0-2779
Remediation
Information
This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
Event History
Aug 15, 2023
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Broadcom RAID Controller web interface vulnerability?
The vulnerability ID for this Broadcom RAID Controller web interface vulnerability is CVE-2023-4344.
2
What is the description of the Broadcom RAID Controller web interface vulnerability?
The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection.
3
What software is affected by this Broadcom RAID Controller web interface vulnerability?
The Broadcom RAID Controller web interface version 51.12.0-2779 is affected by this vulnerability.
4
What is the severity of the Broadcom RAID Controller web interface vulnerability?
The severity of the Broadcom RAID Controller web interface vulnerability is critical with a score of 9.8.
5
How can I fix the Broadcom RAID Controller web interface vulnerability?
To fix the Broadcom RAID Controller web interface vulnerability, it is recommended to apply the latest security patches or updates provided by Broadcom.