CVE-2023-4344

Description

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

PUBLISHED Reserved 2023-08-14 | Published 2023-08-15 | Updated 2024-10-08 | Assigner certcc

Problem types

CWE-331: Insufficient Entropy

Product status

Credits

Intel DCG finder

References

www.broadcom.com/support/resources/product-security-center

cve.org (CVE-2023-4344)

nvd.nist.gov (CVE-2023-4344)

Download JSON