CVE-2023-4344

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Score

CVSS 3.1 9.8 Critical

Status

Modified - cret@cert.org

Published

2023-08-15

Last modified

2025-11-04

Weaknesses

CWE-330, CWE-331

Affected products

• Lsi Storage Authority Lsa (Broadcom)
• Raid Controller Web Interface (Broadcom)
• Raid Web Console 3 Rwc3 (Intel)

References

• https://www.broadcom.com/support/resources/product-security-center
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html