CVE-2023-4328

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows

Score

CVSS 3.1 5.5 Medium

Status

Modified - cret@cert.org

Published

2023-08-15

Last modified

2025-11-04

Weaknesses

CWE-522

Affected products

• Lsi Storage Authority Lsa (Broadcom)
• Raid Controller Web Interface (Broadcom)

References

• https://www.broadcom.com/support/resources/product-security-center
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html