CVE-2023-4329

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Score

CVSS 3.1 9.8 Critical

Status

Modified - cret@cert.org

Published

2023-08-15

Last modified

2025-11-04

Affected products

• Lsi Storage Authority (Broadcom)
• Lsi Storage Authority Lsa (Broadcom)
• Raid Controller Web Interface (Broadcom)
• Raid Web Console 3 (Intel)
• Raid Web Console 3 Rwc3 (Intel)

References

• https://www.broadcom.com/support/resources/product-security-center
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html