CVE Catalog

CVE-2023-4345

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.48%

37th percentile - higher than 37% of all known CVEs

Summary

The Broadcom RAID Controller web interface is vulnerable to client-side control bypass, leading to unauthorized data access for low privileged users.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data, potentially compromising information confidentiality.

Recommendation

It is recommended to update the RAID controller software and implement additional security measures to restrict data access.

Original NVD description (English source)

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user

Vulnerability data from NVD (NIST) · CISA KEV · EPSS