Where
-Infinity
0

Trending

Last week
Last month
Last year

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4326

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4324

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4329

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

Risk 32
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4328

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4325
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

Risk 32
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4327

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

Risk 32
Severity
5.5
Weak Encryption
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4333

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4332

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4331

Broadcom RAID Controller web interfaceBroadcom RAID Controller Web server (nginx) is serving private files without any authentication

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4334
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Broadcom RAID Controller web interfaceBroadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4335

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4336

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4338

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4337

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4339
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Broadcom RAID Controller web interfaceBroadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4340

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4344

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4343

Broadcom RAID Controller web interfaceBroadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4341

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4342
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4323

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable client-side control bypass

Risk 38
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4345

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203