5.5
CVE-2023-4327
- EPSS 0.02%
- Veröffentlicht 15.08.2023 19:15:11
- Zuletzt bearbeitet 04.11.2025 17:15:39
- Quelle cret@cert.org
- CVE-Watchlists
- Unerledigt
LoginBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Raid Controller Web Interface Version51.12.0-2779
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.068 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.