CVE-2023-34332

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf	Vendor Advisory
https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:ami:megarac_sp-x::::::::
	cpe:2.3:o:ami:megarac_sp-x::::::::

History

21 Nov 2024, 08:07

Type	Values Removed	Values Added
References	~~() https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf - Vendor Advisory~~	() https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf - Vendor Advisory

12 Jan 2024, 19:20

Type	Values Removed	Values Added
References	~~() https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf -~~	() https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf - Vendor Advisory
CWE		CWE-119
First Time		Ami Ami megarac Sp-x
CPE		cpe:2.3:o:ami:megarac_sp-x::::::::
Summary		(es) El SPx de AMI contiene una vulnerabilidad en el BMC donde un atacante puede provocar que una red local elimine la referencia de un puntero que no es de confianza. Una explotación exitosa de esta vulnerabilidad puede conducir a una pérdida de confidencialidad, integridad y/o disponibilidad.

09 Jan 2024, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-01-09 23:15

Updated : 2024-11-21 08:07

NVD link : CVE-2023-34332

Mitre link : CVE-2023-34332

CVE.ORG link : CVE-2023-34332

JSON object : View

Products Affected

ami

megarac_sp-x

CWE

CWE-822

Untrusted Pointer Dereference

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2023-34332", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "biossecurity@ami.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-01-09T23:15:07.817", "references": [{"url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf", "tags": ["Vendor Advisory"], "source": "biossecurity@ami.com"}, {"url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "biossecurity@ami.com", "description": [{"lang": "en", "value": "CWE-822"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "\n\n\n\n\n\n\n\n\n\n\nAMI\u2019s SPx contains\na vulnerability in the BMC where an Attacker\nmay cause an untrusted pointer to dereference by a local network. A successful\nexploitation of this vulnerability may lead to a loss of confidentiality,\nintegrity, and/or availability. \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n\n\n\n\n\n\n \n\n\n\n\n\n\n\n \n\n\n\n\n\n\n\n \n\n\n\n\n\n\n\n \n\n\n\n\n\n\n\n"}, {"lang": "es", "value": "El SPx de AMI contiene una vulnerabilidad en el BMC donde un atacante puede provocar que una red local elimine la referencia de un puntero que no es de confianza. Una explotaci\u00f3n exitosa de esta vulnerabilidad puede conducir a una p\u00e9rdida de confidencialidad, integridad y/o disponibilidad."}], "lastModified": "2024-11-21T08:07:01.787", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ami:megarac_sp-x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "402A5B6D-465C-4CC8-B75C-F96F0DE0A67C", "versionEndExcluding": "12.7", "versionStartIncluding": "12"}, {"criteria": "cpe:2.3:o:ami:megarac_sp-x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14A6F62B-9C61-4D73-B15E-205173667C76", "versionEndExcluding": "13.6", "versionStartIncluding": "13"}], "operator": "OR"}]}], "sourceIdentifier": "biossecurity@ami.com"}