CVE-2023-34472
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
AMI SPx contains a vulnerability in the BMC where an attacker may cause an improper neutralization of CRLF sequences in HTTP headers. A successful exploit of this vulnerability may lead to a loss of integrity.
Risk Assessment
The organization may experience data integrity breaches, which could affect trust in systems and their operation.
Recommendation
It is recommended to update the AMI SPx software to the latest version to patch this vulnerability and to monitor systems for unauthorized changes.
Other vulnerabilities in AMI SPx BMC
See all- CVE-2023-34330High
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
- CVE-2023-34471Medium
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss of confidentiality, integrity, and authentication.
- CVE-2023-34337High
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
Original NVD description (English source)
AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS