The Raid Web Console is a web-based application that provides severalconfiguration functions for the Intel RAID line of products. The console monitors, maintains and troubleshoots these products. An attacker could exploit both of these bugs by sending a malicious POST request to the API. In accordance with our coordinated disclosure policy, Cisco Talos worked with Intel to ensure that these issues are resolved and that an update is available for affected customers. These vulnerabilities impact Intel RAID Web Console 3, version 007.009.011.000000.”]
Source: https://blog.talosintelligence.com/2020/03/vulnerability-spotlight-intel-raid-web-march-2020.html