CVE-2023-34342
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
AMI BMC contains a vulnerability in the IPMI handler, allowing an attacker to upload and download arbitrary files under certain circumstances. This may lead to denial of service, privilege escalation, information disclosure, or data tampering.
Risk Assessment
The organization may face serious threats, including data loss, unauthorized access, and service interruptions.
Recommendation
It is recommended to update the AMI BMC software to the latest version and implement appropriate security measures to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering.