CVE-2023-4335

Summary

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Affected Software

VendorProductVersion RangeStatus
BroadcomLSI Storage Authority (LSA)0 < 7.017.011.000affected
IntelRAID Web Console 3 (RWC3)0 < 7.017.011.000affected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References