RAID Controller Web Interface
CVEs (22)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-4344 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection | ||
| CVE-2023-4342 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy | ||
| CVE-2023-4341 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI | ||
| CVE-2023-4340 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file | ||
| CVE-2023-4338 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers | ||
| CVE-2023-4337 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation | ||
| CVE-2023-4336 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute | ||
| CVE-2023-4329 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute | ||
| CVE-2023-4325 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities | ||
| CVE-2023-4324 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers | ||
| CVE-2023-4323 | Cri | 0.64 | 9.8 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup | ||
| CVE-2023-4343 | Hig | 0.49 | 7.5 | 0.00 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter | ||
| CVE-2023-4339 | Hig | 0.49 | 7.5 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions | ||
| CVE-2023-4335 | Hig | 0.49 | 7.5 | 0.00 | Aug 15, 2023 | Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux | ||
| CVE-2023-4334 | Hig | 0.49 | 7.5 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller Web server (nginx) is serving private files without any authentication | ||
| CVE-2023-4332 | Hig | 0.49 | 7.5 | 0.01 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file | ||
| CVE-2023-4331 | Hig | 0.49 | 7.5 | 0.00 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols | ||
| CVE-2023-4326 | Hig | 0.49 | 7.5 | 0.00 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites | ||
| CVE-2023-4345 | Med | 0.42 | 6.5 | 0.00 | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user | ||
| CVE-2023-4333 | Med | 0.36 | 5.5 | 0.00 | Aug 15, 2023 | Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server |
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers
- risk 0.64cvss 9.8epss 0.01
Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
- risk 0.49cvss 7.5epss 0.00
Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
- risk 0.49cvss 7.5epss 0.01
Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
- risk 0.49cvss 7.5epss 0.00
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
- risk 0.49cvss 7.5epss 0.01
Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
- risk 0.49cvss 7.5epss 0.01
Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
- risk 0.49cvss 7.5epss 0.00
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
- risk 0.49cvss 7.5epss 0.00
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites
- risk 0.42cvss 6.5epss 0.00
Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user
- risk 0.36cvss 5.5epss 0.00
Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
Page 1 of 2