Skip to content
Sign in
7.2 High

CVE-2023-34334 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject…

Description

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering.  

Affected products and versions

Product Affected versions Fixed in
MegaRAC_SPx 13.0 13.0 → < 13.5 13.5
MegaRAC_SPx 12.0 12.0 → < 12.7 12.7

Other CVEs of MegaRAC_SPx

The 22 CVEs of MegaRAC_SPx →
CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent… 8.3 High CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High
Track this CVE