Broadcom LSA / Intel RWC3: insufficient randomness from ssl.rnd misuse when setting up CIM connection

CVSS 9.8CVE-2023-4344Firmware, BMC & network fabriccurated

Impact

LSA misuses an ssl.rnd file when it sets up its CIM connection, so the connection gets too little randomness. Weak randomness here can make the TLS key material or session values on the management channel predictable. An attacker on the management network could then observe or tamper with RAID management traffic. The record does not say which values become predictable or how practical recovery is.

Who can reach it

An attacker who can observe or reach the LSA CIM connection on the management network. No authentication is stated as required.

What to do

Upgrade LSA / Intel RWC3 to the fixed release in Intel SA-00926 and restart the LSA service. Consider regenerating any key material LSA created under the vulnerable build. Keep LSA traffic on an isolated management VLAN until patched.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-4344 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html https://www.broadcom.com/support/resources/product-security-center

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.