Skip to content
fr Sign in
5.3 Medium

CVE-2023-34344 AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess…

Description

AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure.

Affected products and versions

Product Affected versions Fixed in
MegaRAC_SPx 13.0 13.0 → < 13.5 13.5
MegaRAC_SPx 12.0 12.0 → < 12.7 12.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of MegaRAC_SPx

The 22 CVEs of MegaRAC_SPx →
CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent… 8.3 High CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High
Track this CVE