Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-4344 EUVD-2023-54209GHSA-8vq8-vjqp-8v4r

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Published Aug 15, 2023 · Updated Nov 4, 2025 · Assigned by certcc

Vendor: Broadcom Vendor: Intel Product: LSI Storage Authority (LSA) Product: RAID Web Console 3 (RWC3)

Description

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Affected products

VendorProductAffectedFixed
Broadcom LSI Storage Authority (LSA) < 7.017.011.000 7.017.011.000
Intel RAID Web Console 3 (RWC3) < 7.017.011.000 7.017.011.000

References