Vulnerability Spotlight: Intel Raid Web Console 3 denial-of-service bugs
Summary: Cisco Talos discovered two denial-of-service vulnerabilities in the web API of Intel RAID Web Console 3, a web application for configuring, monitoring and troubleshooting Intel RAID controllers and storage expanders. Both bugs are triggered by a malicious POST request from a remote unauthenticated attacker: one causes a null pointer dereference that denies service until LSA.exe is restarted, and the other causes the LSA.exe service to exit.
Bottom line: Both flaws are reachable by an unauthenticated attacker over the network with nothing more than a crafted POST request, and recovery from the first depends on someone manually restarting LSA.exe.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-8688
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026