CVE-2023-4328: Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-15 · updated 2026-06-17
Weakness: CWE-522

Description

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows

Affected products

Broadcom Raid Controller Web Interface: 51.12.0-2779

References

https://www.broadcom.com/support/resources/product-security-center
https://www.broadcom.com/support/resources/product-security-center
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

Get alerted when CVE-2023-4328 or the next vulnerability affects your stack