CVE-2023-34330

CVSS 3.1: 8.8 high
EPSS: <1%p45
Published: Jul 18, 2023 · Jul 18, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-34330 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Vendors: ami

Products: megarac sp-x

Weakness: CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

4 stories

Firmware vulnerabilities in millions of computers could give hackers superuser status

Ars Technica · SecurityJul 20, 19:29 UTC · Jul 20, 2023VulnerabilityCVE-2023-34329 CVE-2023-343302 · 1 read

Description · NVD

In the news

New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking

Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks

Two new vulnerabilities found in popular baseboard software

Firmware vulnerabilities in millions of computers could give hackers superuser status