CVE Catalog
CVE-2023-34344
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
AMI BMC contains a vulnerability in the IPMI handler, allowing an unauthorized attacker to use certain oracles to guess a valid username, which may lead to information disclosure.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information, potentially leading to further attacks or security breaches.
Recommendation
It is recommended to monitor and restrict access to the IPMI interface and implement strong password policies for users.
Original NVD description (English source)
AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure.