CVE-2023-4338

Description

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2023-4338 ↗
• www.broadcom.com/support/resources/product-security-center ↗
• www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html ↗

Related CVEs

• CVE-2023-4344Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
• CVE-2023-4342Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
• CVE-2023-4341Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
• CVE-2023-4340Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
• CVE-2023-39403Huawei / HarmonyOS · +1CVSS 9.1
• CVE-2023-39402Huawei / HarmonyOS · +1CVSS 9.1
• CVE-2023-39401Huawei / HarmonyOS · +1CVSS 9.1
• CVE-2023-39400Huawei / HarmonyOS · +1CVSS 9.1