CVE-2023-4339

3 documents3 sources

Severity

7.5HIGH

EPSS

0.1%

top 81.09%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom LSI Storage Authority (lsa)Intel Raid WEB Console 3 (rwc3)Broadcom Raid Controller WEB Interface

Timeline

PublishedAug 15

Description

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDbroadcom/raid_controller_web_interface51.12.0-2779

▶CVEListV5intel/raid_web_console_3_(rwc3)< 7.017.011.000

▶CVEListV5broadcom/lsi_storage_authority_(lsa)< 7.017.011.000

🔴Vulnerability Details

GHSA

GHSA-ghvj-7v2c-3p57: Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions↗2023-08-15

▶

CVEList

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions↗2023-08-15

▶