CVE Catalog
CVE-2023-4338
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.59%
43th percentile - higher than 43% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not provide X-Content-Type-Options headers.
Risk Assessment
The absence of proper headers may lead to MIME sniffing attacks, increasing the risk of exploitation by malicious software.
Recommendation
It is recommended to configure the server to add X-Content-Type-Options headers in HTTP responses.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers