Sign in

Not rated

CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security…

Description

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

Affected products and versions

Product	Affected versions	Fixed in
LSI Storage Authority (LSA) 7.017	earliest → < 7.017.011.000	7.017.011.000
RAID Web Console 3 (RWC3) 7.017	earliest → < 7.017.011.000	7.017.011.000

The 22 CVEs of LSI Storage Authority (LSA) →

CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are… Not rated CVE-2023-4327 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption… Not rated CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities Not rated CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not… Not rated

Do you use LSI Storage Authority (LSA)?

Track this CVE Watch LSI Storage Authority (LSA) Check my SBOMs

www.cveye.io/en/cve/CVE-2023-4342

Timeline

Published August 15, 2023
Last modified November 4, 2025

References

www.broadcom.com www.broadcom.com

Track this CVE