CVE-2023-34338

HighCVSS 7.1

Published: 05/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

AMI SPx contains a vulnerability in the BMC where an attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Risk Assessment

The organization may face serious data security threats, which could result in loss of customer trust and potential financial losses.

Recommendation

It is recommended to update the system to the latest version to eliminate this vulnerability and to review and strengthen the cryptographic key management policy.

Other vulnerabilities in BMC (Baseboard Management Controller)

CVE-2023-34473Medium
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Original NVD description (English source)

AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS