CVE-2023-34341

HIGH

AMI MegaRAC SP-X 12.0-12.7 - Authenticated Arbitrary Memory Read/Write via SPX REST API

Title source: llm
STIX 2.1

Description

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0078
EPSS Percentile 51.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-119
Status published
Products (1)
ami/megarac_sp-x 12.0 - 12.7
Published Jun 12, 2023
Tracked Since Feb 18, 2026