CVE-2023-34330
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
Risk Assessment
Exploitation of this vulnerability could result in serious consequences for the organization, including data loss and disruption of system operations.
Recommendation
It is recommended to update the AMI SPx software and monitor access to the Dynamic Redfish Extension interface to minimize risk.
Other vulnerabilities in AMI SPx BMC
See all- CVE-2023-34472Medium
AMI SPx contains a vulnerability in the BMC where an attacker may cause an improper neutralization of CRLF sequences in HTTP headers. A successful exploit of this vulnerability may lead to a loss of integrity.
- CVE-2023-34471Medium
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss of confidentiality, integrity, and authentication.
- CVE-2023-34337High
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
Original NVD description (English source)
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.