Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2023-34330

Code injection via Dynamic Redfish Extension interface

Description

AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMI MegaRAC_SPx12

Default version status: unaffected

  • 12.0 to < 12.4affected

AMI MegaRAC_SPx13

Default version status: unaffected

  • 13.0 to < 13.2affected

References