6.5
Medium
CVE-2023-34345 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access…
Description
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MegaRAC_SPx 13.0 | 13.0 → < 13.5 | 13.5 |
| MegaRAC_SPx 12.0 | 12.0 → < 12.7 | 12.7 |
References
- 9443417.fs1.hubspotusercontent-na1.net 9443417.fs1.hubspotusercontent-na1.net
Timeline
- Published
- Last modified
Other CVEs of MegaRAC_SPx
The 22 CVEs of MegaRAC_SPx →
CVE-2023-37297
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent…
8.3
High
CVE-2023-37296
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent…
8.3
High
CVE-2023-37295
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent…
8.3
High
CVE-2023-37294
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent…
8.3
High