CVE-2023-4326 — Use of a Broken or Risky Cryptographic Algorithm in LSI Storage Authority

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 76.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Broadcom LSI Storage AuthorityIntel Raid WEB Console 3Broadcom Raid Controller WEB Interface
Timeline
PublishedAug 15

Description

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5broadcom/lsi_storage_authority< 7.017.011.000

🔴Vulnerability Details

2
CVEList
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites↗2023-08-15
▶
GHSA
GHSA-w8q9-55rm-6r8q: Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites↗2023-08-15
▶
CVE-2023-4326 — LSI Storage Authority vulnerability | cvebase