Broadcom RAID Controller Web IF Randomness Flaw (ssl.rnd)
CVE-2023-4344 Published on August 15, 2023
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Vulnerability Analysis
CVE-2023-4344 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Insufficient Entropy
The software uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
Products Associated with CVE-2023-4344
stack.watch emails you whenever new vulnerabilities are published in Broadcom Raid Controller Web Interface or Broadcom Lsi Storage Authority. Just hit a watch button to start following.
Affected Versions
Broadcom LSI Storage Authority (LSA):- Before 7.017.011.000 is affected.
- Before 7.017.011.000 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.