Skip to content
fr Sign in
7.7 High

CVE-2023-34335 AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI…

Description

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service.  

Affected products and versions

Product Affected versions Fixed in
MegaRAC_SPx 13.0 13.0 → < 13.5 13.5
MegaRAC_SPx 12.0 12.0 → 12.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of MegaRAC_SPx

The 22 CVEs of MegaRAC_SPx →
CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent… 8.3 High CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High
Track this CVE