CVE-2023-4344

9.8 criticalEPSS 0.7%

Critical (9.8) in broadcom raid controller web interface. EPSS 0.7% chance of exploitation in the next 30 days.

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWEs: CWE-330, CWE-331
Published: 2023-08-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19