CVE-2023-34334
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
AMI BMC contains a vulnerability in the SPX REST API that allows an attacker with the required privileges to inject arbitrary shell commands. This may lead to code execution, denial of service, information disclosure, or data tampering.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing attackers with system access to perform unauthorized actions, potentially leading to data loss or service disruption.
Recommendation
It is recommended to update the AMI BMC software to the latest version to mitigate this vulnerability and restrict API access to trusted users.
Other vulnerabilities in AMI BMC SPX REST API
See all- CVE-2023-34343High
AMI BMC contains a vulnerability in the SPX REST API that allows an attacker with the required privileges to inject arbitrary shell commands. This may lead to code execution, denial of service, information disclosure, or data tampering.
- CVE-2023-34345Medium
AMI BMC contains a vulnerability in the SPX REST API, allowing an attacker with the required privileges to access arbitrary files, which may lead to information disclosure.
Original NVD description (English source)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering.