CVE-2023-4326
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable due to an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites.
Risk Assessment
The organization may be exposed to attacks exploiting the weaknesses of obsolete ciphers, potentially leading to data compromise.
Recommendation
It is recommended to update the TLS configuration to disable SHA1-based ciphers and implement more secure encryption options.
Other vulnerabilities in Interfejs webowy kontrolera RAID firmy Broadcom
See all- CVE-2023-4336Critical
The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard cookies with the Secure attribute.
- CVE-2023-4331High
The Broadcom RAID Controller web interface has a vulnerability related to an insecure default TLS configuration that supports obsolete and vulnerable TLS protocols.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites