CVE Catalog

CVE-2023-4341

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.59%

43th percentile - higher than 43% of all known CVEs

Summary

Broadcom RAID Controller is vulnerable to privilege escalation to root due to the creation of insecure folders by the Web GUI.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system, posing a serious threat to data integrity and confidentiality.

Recommendation

It is recommended to update the RAID controller software and verify the permissions of folders created by the Web GUI.

Original NVD description (English source)

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Vulnerability data from NVD (NIST) · CISA KEV · EPSS