5.3
Medium
CVE-2023-34344 AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess…
Description
AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MegaRAC_SPx 13.0 | 13.0 → < 13.5 | 13.5 |
| MegaRAC_SPx 12.0 | 12.0 → < 12.7 | 12.7 |
Other CVEs of MegaRAC_SPx
The 22 CVEs of MegaRAC_SPx →
CVE-2023-37297
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent…
8.3
High
CVE-2023-37296
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent…
8.3
High
CVE-2023-37295
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent…
8.3
High
CVE-2023-37294
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent…
8.3
High