CVE-2023-4336

Summary

CVE-2023-4336 is a vulnerability affecting Broadcom RAID Controller web interfaces. The issue arises due to an insecure default HTTP configuration that fails to safeguard cookies with the Secure attribute. An attacker can potentially steal sensitive information, such as login credentials, by intercepting and decoding these cookies over unsecured connections. To mitigate this risk, it is recommended that users update their RAID controller firmware to the latest version, which includes a fix for this vulnerability. Additionally, it is essential to configure the web interface to use secure HTTPS connections and properly set cookie security options.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.