Skip to contentIntel Raid Web Console 3 (rwc3) vulnerabilities
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attributeCVE-2023-43299.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +1 more +3 moreBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuitesCVE-2023-43267.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilitiesCVE-2023-43259.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headersCVE-2023-43249.8 Critical
- broadcom lsi storage authority (lsa), lsi storage authority, raid controller web interface +2 more +4 moreBroadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on LinuxCVE-2023-43357.5 High
- broadcom lsi storage authority (lsa), raid controller web interface, intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller Web server (nginx) is serving private files without any authenticationCVE-2023-43347.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to Improper permissions on the log fileCVE-2023-43327.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocolsCVE-2023-43317.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options HeadersCVE-2023-43389.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installationCVE-2023-43379.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attributeCVE-2023-43369.8 Critical
- broadcom lsi storage authority (lsa), raid controller web interface, intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log fileCVE-2023-43409.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissionsCVE-2023-43397.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connectionCVE-2023-43449.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameterCVE-2023-43437.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policyCVE-2023-43429.8 Critical
- broadcom lsi storage authority (lsa), raid controller web interface, intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUICVE-2023-43419.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setupCVE-2023-43239.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable client-side control bypassCVE-2023-43456.5 Medium