Unscored CVE-2023-4328 EUVD-2023-54193GHSA-c2mc-q4gg-xgm7

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

Published Aug 15, 2023 · Updated Nov 4, 2025 · Assigned by certcc

Vendor: Broadcom Product: LSI Storage Authority (LSA)

Description

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows

Affected products

Vendor	Product	Affected	Fixed
Broadcom	LSI Storage Authority (LSA)	< 7.017.011.000	7.017.011.000

References

https://www.broadcom.com/support/resources/product-security-center