235 matches found
CVE-2023-37295
The CVE-2023-37295 entry concerns AMI MegaRAC SP-X BMC, where a heap memory corruption vulnerability can be triggered by an adjacent network. Affected component: MegaRAC SP-X firmware/BMC memory management. Impact is stated as potential loss of confidentiality, integrity, and availability. CVSS d...
CVE-2023-37294 Heap-based Buffer Overflow
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...
CVE-2023-37294 Heap-based Buffer Overflow
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...
CVE-2023-37294
CVE-2023-37294 affects AMI MegaRAC SPx BMC. The vulnerability is described as a heap memory corruption that can be triggered by an adjacent network, with potential impact to confidentiality, integrity, and availability. The CVE entry cites high-severity scores (CVSS 3.1: AV Adjacent, AC Low/High ...
CVE-2023-37293 stack-based buffer overflow
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...
CVE-2023-37293
CVE-2023-37293 affects AMI MegaRAC SPx BMC, with a stack-based buffer overflow exploitable over an adjacent network. The vulnerability impacts confidentiality, integrity, and availability. Affected component: SPx BMC; attacker access required via adjacent network; exploitation details, mitigation...
CVE-2023-34333 Untrusted Pointer Dereference
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...
CVE-2023-34333
CVE-2023-34333 affects AMI MegaRAC SPx BMC, where an attacker on the local network can cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Connected sources consistently describe the vulnerability in the SPx BMC and its local-network e...
CVE-2023-3043
CVE-2023-3043 affects AMI MegaRAC SPx BMC, where a stack-based buffer overflow can be triggered over an adjacent network. The vulnerability in the SPx firmware could lead to confidentiality, integrity, and availability losses. Reported CVSS vectors indicate high to critical impact (CVSS v3.1: AV:...
CVE-2023-34332
CVE-2023-34332 covers a vulnerability in AMI’s MegaRAC SPx BMC. The issue allows an attacker on the local network to cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Effectively, the BMC firmware component and its handling of pointe...
AMI MegaRAC SPx Buffer Error Vulnerability
AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...
AMI MegaRAC SPx Buffer Error Vulnerability
AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...
PT-2024-1586 · Ami · Ami Megarac Sp-X
Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a buffer overflow in the dynamic memory of the AMI MegaRAC SP-X software, which can be exploited by a remote attacker to impact the confidentiality,...
AMI MegaRAC SPx Buffer Error Vulnerability
AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...
AMI MegaRAC SPx Buffer Error Vulnerability
AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...
CVE-2023-5552
CVE-2023-5552 describes a password-disclosure vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall 19.5 MR3 (19.5.3) and older, where a password type set to “Specified by sender” allows an attacker with full email access to decrypt PDFs. The issue is tied to SPX password hand...
CVE-2023-5552
A password disclosure vulnerability in the Secure PDF eXchange SPX feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 19.5.3 and older, if the password type is set to “Specified by sender”...
CVE-2023-34330
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34330
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
Design/Logic Flaw
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...