Back to CVE Browser

CVE-2023-28863

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-04-18

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.

Affected Platforms (CPE)

💻

Ami

Megarac Sp X

= 12= 13

References & Advisories

🔗 https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023003.pdf

🔗 https://ami.com

🔗 https://www.kb.cert.org/vuls/id/163057

🔗 https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023003.pdf

🔗 https://ami.com

🔗 https://www.kb.cert.org/vuls/id/163057

Related Vulnerabilities

CVE-2023-343299.1

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A s...

CVE-2023-255057.8

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate leve...

CVE-2023-251925.3

AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.

CVE-2023-251917.5

AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.0...