CVE-2023-34334

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2023-34334

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2023-34343

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2023-34343

CVE-2023-34343 concerns AMI BMC (American Megatrends) with a vulnerability in the SPX REST API . An attacker with the required privileges can inject arbitrary shell commands via the REST interface, potentially causing code execution, denial of service, information disclosure, or data tampering . ...

CVE-2023-34342

CVE-2023-34342 affects AMI BMC in the IPMI handler, enabling an attacker to upload/download arbitrary files under certain conditions and causing denial of service, privilege escalation, information disclosure, or data tampering. Public documents cite NVD CVSSv3.1 base score 9.1 (CRITICAL) with NE...

CVE-2023-34342

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering...

CVE-2023-34342

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering...

CVE-2023-34341

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2023-34341

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2023-34341

CVE-2023-34341 concerns a vulnerability in BMC AMI’s SPX REST API. An attacker with required privileges can read/write arbitrary memory within the IPMI server process, potentially enabling code execution, denial of service, information disclosure, or data tampering. Attack vector is network-based...

BMC AMI 缓冲区错误漏洞

BMC AMI BMC Automated Mainframe Intelligence is an automated mainframe intelligence solution from BMC USA. A security vulnerability exists in BMC AMI. An attacker could exploit this vulnerability to read and write arbitrary locations in the memory of an IPMI server process, resulting in code...

BMC AMI 操作系统命令注入漏洞

BMC AMI BMC Automated Mainframe Intelligence is an automated mainframe intelligence solution from BMC USA. A security vulnerability exists in BMC AMI. An attacker exploiting this vulnerability could inject arbitrary shell commands that could lead to code execution, denial of service, information...

PT-2023-24819 · American Megatrends International · Ami Bmc

Name of the Vulnerable Software and Affected Versions: AMI BMC affected versions not specified Description: The issue is related to a vulnerability in the SPX REST API of AMI BMC, where an attacker with the required privileges can inject arbitrary shell commands. This may lead to code execution,...

PT-2023-24829 · American Megatrends · Ami Bmc

Name of the Vulnerable Software and Affected Versions: AMI BMC affected versions not specified Description: The issue concerns the SPX REST API in AMI BMC, where an attacker with the required privileges can inject arbitrary shell commands. This could potentially lead to code execution, denial of...

BMC AMI 操作系统命令注入漏洞

BMC AMI BMC Automated Mainframe Intelligence is an automated mainframe intelligence solution from BMC USA. A security vulnerability exists in BMC AMI that stems from the presence of an arbitrary shell command injection vulnerability, which could lead to code execution, denial of service,...

BMC AMI 路径遍历漏洞

BMC AMI BMC Automated Mainframe Intelligence is an automated mainframe intelligence solution from BMC USA. A security vulnerability exists in BMC AMI. An attacker exploiting this vulnerability could upload and download arbitrary files under certain circumstances, resulting in a denial of service,...

PT-2023-22383 · Solive · Solive

Name of the Vulnerable Software and Affected Versions: SoLive versions 1.6.14 through 1.6.20 for Android Description: The issue concerns an exposed component that provides a method to modify the SharedPreference file. An attacker can exploit this to modify data in any SharedPreference file, which...

PT-2023-22380 · Unknown · Call Blocker

Name of the Vulnerable Software and Affected Versions: Call Blocker application version 6.6.3 Description: The issue allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack. Recommendations: For version 6.6.3, update to a newer version that contai...

AlmaLinux 9 : fwupd (ALSA-2023:2487)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2487 advisory. - When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper...

Debian: Security Advisory (DLA-3418-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...