Skip to content
fr Sign in
6.0 Medium

CVE-2023-34342 AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under…

Description

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering.

Affected products and versions

Product Affected versions Fixed in
MegaRAC_SPx 13.0 13.0 → < 13.5 13.5
MegaRAC_SPx 12.0 12.0 → < 12.7 12.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of MegaRAC_SPx

The 22 CVEs of MegaRAC_SPx →
CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent… 8.3 High CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High
Track this CVE