CVE-2023-4341 - Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

CRITICAL

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Published Aug 15, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.70%

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

affected

Version	Status	Constraints
0	affected	<7.017.011.000

unaffected

Version	Status	Constraints
0	affected	<7.017.011.000

Vendor solution

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54206		Advisory
https://www.broadcom.com/support/resources/product-security-center		Product
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html