Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2023-34335

AMI BMC contains a vulnerability in the IPMI handler, where an

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMI

Description

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service.  

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMI MegaRAC_SPx

Default version status: unaffected

  • 13.0 to < 13.5affected
  • 12.0 to ≤ 12.7affected

References