CVE Catalog
CVE-2023-4342
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.59%
43th percentile - higher than 43% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking an HTTP Strict-Transport-Security policy.
Risk Assessment
The absence of proper security policy may lead to man-in-the-middle attacks, jeopardizing the integrity and confidentiality of data transmitted through the interface.
Recommendation
It is recommended to configure the HTTP Strict-Transport-Security policy to secure communication with the RAID controller web interface.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy