Broadcom RAID controller web interface: CIM private keys stored with insecure file permissions

CVSS 7.5CVE-2023-4339Firmware, BMC & network fabriccurated

Impact

The web management interface for Broadcom RAID controllers stores the private keys it uses for CIM with insecure file permissions, so they can be read and disclosed. Anyone who gets those keys could impersonate or intercept the management channel to the storage controllers on that host. The record scores this as network-reachable with no authentication and high confidentiality impact. It does not say how the keys are reached over the network beyond the score.

Who can reach it

Network-reachable according to the CVSS vector (AV:N/PR:N), no authentication needed. Real exposure depends on whether LSA or RWC3 is installed on the node and whether its web interface can be reached outside the management network.

What to do

Follow the Broadcom product security center and Intel SA-00926 to update LSI Storage Authority or RAID Web Console 3. The record lists 51.12.0-2779 as affected but does not give a fixed version. Until it is updated, keep the RAID web console reachable only from the management network, or uninstall it on nodes that do not need it. Rotate the CIM keys after upgrading.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-4339 https://www.broadcom.com/support/resources/product-security-center https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.