CriticalCVSS 9.8
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
Product
intel raid web console 3 vulnerabilities
12 published CVES affecting intel raid web console 3, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 12
- Critical
- 4
- High
- 6
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest intel raid web console 3 CVEs
Newest publication first
-
-
CriticalCVSS 9.8
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
-
CriticalCVSS 9.8
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers
-
HighCVSS 7.5
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
-
HighCVSS 7.5
Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
-
HighCVSS 7.5
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
-
HighCVSS 7.5
Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of service via network access.
-
HighCVSS 7.8
Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8
Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
CriticalCVSS 9.8
Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.
-
MediumCVSS 6.1
Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.
-
MediumCVSS 5.5
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.