CVE-2023-34329
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.
Risk Assessment
The organization may face serious security threats, including data loss and unauthorized access to systems.
Recommendation
It is recommended to update the software to the latest version and implement additional security mechanisms to protect against HTTP header spoofing.
Original NVD description (English source)
AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.