CVE-2023-4331

CWE-327 — Broken Cryptographic Algorithm3 documents3 sources

Severity

7.5HIGH

EPSS

0.0%

top 84.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom LSI Storage Authority (lsa)Intel Raid WEB Console 3 (rwc3)Broadcom Raid Controller WEB Interface

Timeline

PublishedAug 15

Description

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDbroadcom/raid_controller_web_interface51.12.0-2779

▶CVEListV5intel/raid_web_console_3_(rwc3)< 7.017.011.000

▶CVEListV5broadcom/lsi_storage_authority_(lsa)< 7.017.011.000

🔴Vulnerability Details

CVEList

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols↗2023-08-15

▶

GHSA

GHSA-h82f-38xj-477x: Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols↗2023-08-15

▶