RC
Product
Raid Controller Web Interface
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 7Medium 4Low 0
Watch
Add Raid Controller Web Interface to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4343 | 7.5 | Aug 15 | Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter Affected: 51.12.0-2779 |
| CVE-2023-4339 | 7.5 | Aug 15 | Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions Affected: 51.12.0-2779 |
| CVE-2023-4335 | 7.5 | Aug 15 | Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux Affected: 51.12.0-2779 |
| CVE-2023-4334 | 7.5 | Aug 15 | Broadcom RAID Controller Web server (nginx) is serving private files without any authentication Affected: 51.12.0-2779 |
| CVE-2023-4332 | 7.5 | Aug 15 | Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file Affected: 51.12.0-2779 |
| CVE-2023-4331 | 7.5 | Aug 15 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols Affected: 51.12.0-2779 |
| CVE-2023-4326 | 7.5 | Aug 15 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites Affected: 51.12.0-2779 |
Showing 7