Skip to content
OpenAdvisories
Unscored CVE-2023-4345 EUVD-2023-54210GHSA-wfv7-gj87-q7qv

Broadcom RAID Controller web interface is vulnerable client-side control bypass

Published Aug 15, 2023 · Updated Nov 4, 2025 · Assigned by certcc

Description

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user

Affected products

VendorProductAffectedFixed
Broadcom LSI Storage Authority (LSA) < 7.017.011.000 7.017.011.000
Intel RAID Web Console 3 (RWC3) < 7.017.011.000 7.017.011.000

References