Lucene search

[email protected]CVE-2023-4333

HistoryAug 15, 2023 - 7:15 p.m.

CVE-2023-4333

2023-08-1519:15:11

[email protected]

web.nvd.nist.gov

broadcom

raid controller

ssl

cipher

vulnerability

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

Affected configurations

NVD

Node

broadcomraid_controller_web_interfaceMatch51.12.0-2779

AND

microsoftwindowsMatch-

CPENameOperatorVersion
broadcom:raid_controller_web_interfacebroadcom raid controller web interfaceeq51.12.0-2779

CPE	Name	Operator	Version
broadcom:raid_controller_web_interface	broadcom raid controller web interface	eq	51.12.0-2779

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "LSI Storage Authority (LSA)",
    "vendor": "Broadcom",
    "versions": [
      {
        "lessThan": "7.017.011.000",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RAID Web Console 3 (RWC3)",
    "vendor": "Intel",
    "versions": [
      {
        "lessThan": "7.017.011.000",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.broadcom.com/support/resources/product-security-center

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-4333

prion1 cvelist1 nvd1