CVE-2023-34341
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
AMI BMC contains a vulnerability in the SPX REST API, allowing an attacker with the required privileges to read and write to arbitrary locations within the memory context of the IPMI server process. This may lead to code execution, denial of service, information disclosure, or data tampering.
Risk Assessment
This vulnerability poses a significant risk to organizations, enabling attackers to potentially take control of the system, which could result in data loss or service interruptions.
Recommendation
It is recommended to immediately update the AMI BMC software to the latest version to mitigate this vulnerability and restrict API access to trusted users.
Other vulnerabilities in AMI BMC
See all- CVE-2023-34342Medium
AMI BMC contains a vulnerability in the IPMI handler, allowing an attacker to upload and download arbitrary files under certain circumstances. This may lead to denial of service, privilege escalation, information disclosure, or data tampering.
- CVE-2023-34336High
AMI BMC contains a vulnerability in the IPMI handler that allows an attacker with the required privileges to cause a buffer overflow. This may lead to code execution, denial of service, or escalation of privileges.
- CVE-2023-34335High
AMI BMC contains a vulnerability in the IPMI handler, allowing an unauthenticated host to write to a host SPI flash, bypassing secure boot protections. Exploitation of this vulnerability may lead to loss of integrity or denial of service.
- CVE-2023-34344Medium
AMI BMC contains a vulnerability in the IPMI handler, allowing an unauthorized attacker to use certain oracles to guess a valid username, which may lead to information disclosure.
Original NVD description (English source)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering.