Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2023-17168 CVE-2023-34336 · GHSA-gfv2-qw87-j6hg

Buffer overflow in AMI MegaRAC_SPx

Priority MEDIUM 41

AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of service, or escalation of privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00665 Published 2023-06-12 Fixed in 13.5, 12.7 CWE-120
TI-2023-17166 CVE-2023-34334 · GHSA-9v36-qf5c-mhjv

OS command injection in AMI MegaRAC_SPx

Priority MEDIUM 42

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or da…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0084 Published 2023-06-12 Fixed in 12.7, 13.5 CWE-78
TI-2023-17175 CVE-2023-34343 · GHSA-6656-v3r9-x9pr

OS command injection in AMI MegaRAC_SPx

Priority MEDIUM 42

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or da…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0084 Published 2023-06-12 Fixed in 12.7, 13.5 CWE-78
TI-2023-17174 CVE-2023-34342 · GHSA-94pf-pm66-75fv

Path traversal in AMI MegaRAC_SPx

Priority MEDIUM 42

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disc…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00531 Published 2023-06-12 Fixed in 12.7, 13.5 CWE-22
TI-2023-17173 CVE-2023-34341 · GHSA-cppv-h49f-28jw

Memory corruption in AMI MegaRAC_SPx

Priority MEDIUM 41

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00777 Published 2023-06-12 Fixed in 12.7, 13.5 CWE-119
TI-2023-17177 CVE-2023-34345 · GHSA-6876-wvq5-5mg4

Path traversal in AMI MegaRAC_SPx

Priority LOW 30

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00719 Published 2023-06-12 Fixed in 12.7, 13.5 CWE-22