CVE-2023-4339 - Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

HIGH

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

Published Aug 15, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.83%

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

Vendor Broadcom Product LSI Storage Authority (LSA) Default
affected
Affected
- ≥ 0, < 7.017.011.000
Vendor Intel Product RAID Web Console 3 (RWC3) Default
unaffected
Affected
- ≥ 0, < 7.017.011.000

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Broadcom	LSI Storage Authority (LSA)	affected	Affected ≥ 0, < 7.017.011.000
Intel	RAID Web Console 3 (RWC3)	unaffected	Affected ≥ 0, < 7.017.011.000

Vendor solution

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54204		Advisory
https://www.broadcom.com/support/resources/product-security-center		Product
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Aug 15, 2023

Updated Nov 4, 2025

Reserved Aug 14, 2023

CISA Vulnrichment

Updated Oct 8, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner certcc

Published Aug 15, 2023

Updated Nov 4, 2025

GitHub

No data