Skip to content
OpenAdvisories

Vendor

Broadcom

95 known vulnerabilities.

Products

LSI Storage Authority (LSA) 22 Symantec Privileged Access Management 18 BCM5820X 13 DX NetOps Spectrum 10 Symantec IT Management Suite 3 Brocade ASCG 3 Brocade SANnav 3 Symantec Endpoint Protection Windows Client 2 WiFi drivers 2 Symantec PGP Encryption 2 Automic Automation 2 brcmfmac WiFi driver 2 Symantec Web Security Services Agent 1 Data Loss Prevention 1 Layer 7 API Gateway 1 Unified Infrastructure Management 1 Symantec Management Suite 1 Brocade Fabric OS 1 SiteMinder 1 8.6.IT Management Suite 1 Symantec SiteMinder 1 Symantec Ghost Solution Suite 1 Symantec Endpoint Protection CleanWipe Removal Tool 1 CA Client Automation (ITCM) 1 Symantec Endpoint Detection and Response 1 Automic Workload Automation 0 Automic Automation Agent 0 Brocade Switch 0 Brocade SANnav < 2.2.0.2 0 Brocade SANnav < 2.2.1 0 Fabric OS 0
All Critical High Medium Low Exploited only Public exploit

95 results · Feed

  • Unscored —
    CVE-2023-4338

    Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

    Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4337

    Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

    Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4336

    Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

    Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4339

    Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

    Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4340

    Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

    Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4342

    Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

    Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4341

    Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

    Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Critical 9.8
    CVE-2023-4344

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4343

    Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

    Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4323

    Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

    Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Unscored —
    CVE-2023-4345

    Broadcom RAID Controller web interface is vulnerable client-side control bypass

    Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • High 7.9
    CVE-2019-9502

    Broadcom wl driver is vulnerable to heap buffer overflow

    The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiF…

    Broadcom WiFi drivers
  • High 7.9
    CVE-2019-9501

    Broadcom wl driver is vulnerable to heap buffer overflow

    The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-…

    Broadcom WiFi drivers
  • High 7.9
    CVE-2019-9500

    Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

    The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffe…

    Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.9
    CVE-2019-9503

    Broadcom brcmfmac driver is vulnerable to a frame validation bypass

    The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this…

    Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu