CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
HighCVSS 7.5
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom LSI Storage Authority (LSA) | < 7.017.011.000 | 7.017.011.000 |
| intel RAID Web Console 3 (RWC3) | < 7.017.011.000 | 7.017.011.000 |
| broadcom lsi storage authority | < 7.017.011.000 | 7.017.011.000 |
| intel raid web console 3 | < 7.017.011.000 | 7.017.011.000 |
| broadcom raid controller web interface | = 51.12.0-2779 | No fix listed |
References
- www.broadcom.com product
- www.intel.com