CVE-2023-34471
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss of confidentiality, integrity, and authentication.
Risk Assessment
The organization may be exposed to data loss and security breaches, which could lead to serious legal and financial consequences.
Recommendation
It is recommended to update the AMI SPx software and implement additional security measures to protect against potential attacks.
Original NVD description (English source)
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication.