CVE Catalog

CVE-2023-4337

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.59%

43th percentile - higher than 43% of all known CVEs

Summary

The Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation.

Risk Assessment

This vulnerability may allow an attacker to gain access to other users' sessions, potentially leading to unauthorized access to data and resources.

Recommendation

It is recommended to update the RAID controller software and implement appropriate security measures to protect user sessions.

Original NVD description (English source)

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Vulnerability data from NVD (NIST) · CISA KEV · EPSS