CVE-2023-34337
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
Risk Assessment
The organization may be exposed to serious data security threats, potentially leading to data breaches and system downtime.
Recommendation
It is recommended to update the AMI SPx software and implement additional security measures to mitigate the risks associated with this vulnerability.
Other vulnerabilities in AMI SPx BMC
See all- CVE-2023-34330High
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
- CVE-2023-34472Medium
AMI SPx contains a vulnerability in the BMC where an attacker may cause an improper neutralization of CRLF sequences in HTTP headers. A successful exploit of this vulnerability may lead to a loss of integrity.
- CVE-2023-34471Medium
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss of confidentiality, integrity, and authentication.
Original NVD description (English source)
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.