← Back

CVE-2023-34471

nvd nist
Published: Jul 5, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.2
Source: NVD

Description

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication.

Affected (2)

Products: Ami: Megarac Sp X
Ami
1 product
Megarac Sp X
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ami
Megarac Sp X
Version 12
Megarac Sp X
Version 13

Related CWEs

CWE-325
Missing Cryptographic Step
The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.

References (2)

Source: biossecurity@ami.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.