Broadcom RAID Controller web interface vulnerabilities

5 known CVE vulnerabilities in Broadcom RAID Controller web interface, translated and rated.

CVE-2023-4342Critical
The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking an HTTP Strict-Transport-Security policy.
CVE-2023-4329Critical
The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard the SESSIONID cookie with the SameSite attribute.
CVE-2023-4339High
The Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions.
CVE-2023-4328Medium
The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data, and the keys used for encryption are accessible to any local user on Windows.
CVE-2023-4327Medium
The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data, and the keys used for encryption are accessible to any local user on Linux.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS