Lucene search

AMICVE-2023-34472

HistoryJul 05, 2023 - 7:15 p.m.

CVE-2023-34472

2023-07-0519:15:10

CWE-113

CWE-93

AMI

web.nvd.nist.gov

cve-2023-34472

ami

spx

bmc

vulnerability

http

header manipulation

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity.

Affected configurations

Nvd

Node

amimegarac_sp-xMatch12-

amimegarac_sp-xMatch13-

VendorProductVersionCPE
amimegarac_sp-x12cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:*
amimegarac_sp-x13cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
ami	megarac_sp-x	12	cpe:2.3:o:ami:megarac_sp-x:12:-::::::
ami	megarac_sp-x	13	cpe:2.3:o:ami:megarac_sp-x:13:-::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "ARM"
    ],
    "product": "MegaRAC_SPx",
    "vendor": "AMI",
    "versions": [
      {
        "lessThan": "12.7",
        "status": "affected",
        "version": "12.0",
        "versionType": "RC"
      },
      {
        "lessThan": "13.5",
        "status": "affected",
        "version": "13.0",
        "versionType": "RC"
      }
    ]
  }
]

References

9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

Related for CVE-2023-34472