CVE-2023-4331

EUVD-2023-54196
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
broadcomraid_controller_web_interface
51.12.0-2779
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.broadcom.com/support/resources/product-security-center
https://www.broadcom.com/support/resources/product-security-center
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html