Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4324

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4329

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4325

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4336

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4338
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4337

Broadcom RAID Controller web interfaceBroadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4340

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4344

Broadcom RAID Controller web interfaceBroadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4341

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4342
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Broadcom RAID Controller web interfaceBroadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

Remedy

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
First published (updated )
CVE-2023-4323

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203