PT-2023-28820 · Broadcom · Broadcom Raid Controller

Intel Dcg · Publicado 2023-08-15 · Atualizado 2023-08-29 · CVE-2023-4341

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller (affected versions not specified)

Description The issue is related to the creation of insecure folders by the Web GUI, which can lead to privilege escalation to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2023-4341

Produtos afetados

Broadcom Raid Controller

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-4341 · Nota de Segurança
• https://twitter.com/NUYTSTECH/status/1696503728420086227 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-4341 · Aviso do Fabricante
• https://t.me/cvenotify/57018 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1691519814521745410 · Publicação no Twitter
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html · Nota
• https://broadcom.com/support/resources/product-security-center · Nota
• https://t.me/cibsecurity/68584 · Publicação no Telegram