CyberSec.Space Logo
Back to CVE Browser

CVE-2023-34329

CRITICAL
9.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-07-18
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

Affected Platforms (CPE)

💻
Ami

Megarac Sp X

= 12= 13

References & Advisories

🔗 https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
🔗 https://security.netapp.com/advisory/ntap-20230814-0004/
🔗 https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
🔗 https://security.netapp.com/advisory/ntap-20230814-0004/

Related Vulnerabilities

CVE-2023-255057.8

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate leve...

CVE-2023-288639.1

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.

CVE-2023-251925.3

AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.

CVE-2023-251917.5

AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.0...