CVE-2023-4329: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-15 · updated 2026-06-17

Description

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Affected products

Broadcom Raid Controller Web Interface: 51.12.0-2779

References

https://www.broadcom.com/support/resources/product-security-center
https://www.broadcom.com/support/resources/product-security-center
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

Get alerted when CVE-2023-4329 or the next vulnerability affects your stack