CVE Catalog
CVE-2023-4333
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
The Broadcom RAID Controller web interface does not enforce SSL cipher ordering by the server, potentially leading to security vulnerabilities.
Risk Assessment
The lack of enforced SSL cipher ordering may allow attackers to intercept or manipulate data transmitted between the server and client.
Recommendation
It is recommended to configure the server to enforce proper SSL cipher ordering and to regularly update the RAID controller software.
Original NVD description (English source)
Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server