CVE Catalog
CVE-2023-4344
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.59%
43th percentile - higher than 43% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to set up CIM connection.
Risk Assessment
Improper generation of random values may weaken the security of connections, creating risks of data interception or man-in-the-middle attacks.
Recommendation
It is recommended to update the RAID controller software and ensure that randomness generation mechanisms are properly configured.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection