CVE-2023-4328

MediumCVSS 5.5

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data, and the keys used for encryption are accessible to any local user on Windows.

Risk Assessment

The exposure of sensitive data and encryption keys could lead to serious security breaches within the organization, allowing unauthorized access to data.

Recommendation

It is recommended to restrict access to the web interface and implement additional security measures to protect sensitive data and encryption keys.

Original NVD description (English source)

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows