Stack overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37297 heap memory overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37297

AMI MegaRAC SPx (BMC) is affected by a heap memory corruption vulnerability that can be triggered by an adjacent network. The vulnerability affects AMI MegaRAC SP-X family and is described across multiple sources as enabling an attacker to compromise confidentiality, integrity, and availability. ...

CVE-2023-37296 Stack-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37296

CVE-2023-37296 affects AMI MegaRAC SP-X BMC. The vulnerability enables an attacker to cause stack memory corruption over an adjacent network, with potential losses to confidentiality, integrity, and availability. Reported CVSS data indicate high risk (base score 8.8/8.3 in alternate vectors) with...

CVE-2023-37295

The CVE-2023-37295 entry concerns AMI MegaRAC SP-X BMC, where a heap memory corruption vulnerability can be triggered by an adjacent network. Affected component: MegaRAC SP-X firmware/BMC memory management. Impact is stated as potential loss of confidentiality, integrity, and availability. CVSS d...

CVE-2023-37295 Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37294 Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37293 stack-based buffer overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37293

CVE-2023-37293 affects AMI MegaRAC SPx BMC, with a stack-based buffer overflow exploitable over an adjacent network. The vulnerability impacts confidentiality, integrity, and availability. Affected component: SPx BMC; attacker access required via adjacent network; exploitation details, mitigation...

CVE-2023-34333

CVE-2023-34333 affects AMI MegaRAC SPx BMC, where an attacker on the local network can cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Connected sources consistently describe the vulnerability in the SPx BMC and its local-network e...

CVE-2023-3043

CVE-2023-3043 affects AMI MegaRAC SPx BMC, where a stack-based buffer overflow can be triggered over an adjacent network. The vulnerability in the SPx firmware could lead to confidentiality, integrity, and availability losses. Reported CVSS vectors indicate high to critical impact (CVSS v3.1: AV:...

CVE-2023-3043 Stack-based Buffer Overflow BMC

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-3043 Stack-based Buffer Overflow BMC

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-34332 Untrusted Pointer Dereference in BMC

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-34332

CVE-2023-34332 covers a vulnerability in AMI’s MegaRAC SPx BMC. The issue allows an attacker on the local network to cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Effectively, the BMC firmware component and its handling of pointe...

PT-2024-1585 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a heap memory corruption vulnerability in the BMC of AMI MegaRAC SP-X. This vulnerability can be exploited by an attacker via an adjacent network, potential...

PT-2024-1589 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a stack-based buffer overflow in the BMC of AMI's SPx, which can be exploited via an adjacent network. This can lead to a loss of confidentiality, integrity...

CVE-2023-33411

A web server in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive...

CVE-2023-33413

The configuration functionality in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands...