CVE-2023-34329

CVSS 3.1: 8.0 high
EPSS: 1%p66
Published: Jul 18, 2023 · Jul 18, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-34329 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

Vendors: ami

Products: megarac sp-x

Weakness: CWE-290, CWE-306

Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

4 stories

Firmware vulnerabilities in millions of computers could give hackers superuser status

Ars Technica · SecurityJul 20, 19:29 UTC · Jul 20, 2023VulnerabilityCVE-2023-34329 CVE-2023-343302 · 1 read

Description · NVD

In the news

New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking

Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks

Two new vulnerabilities found in popular baseboard software

Firmware vulnerabilities in millions of computers could give hackers superuser status