MegaRAC SPx12 vulnerabilities

2 known vulnerabilities in MegaRAC SPx12 from AMI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  MegaRAC_SPx12: Improper Control of Generation of Code

  CVE-2023-34330Jul 18, 2023AMI

  AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

• 8.0 High severity

  MegaRAC_SPx12: Authentication Bypass by Spoofing

  CVE-2023-34329Jul 18, 2023AMIEPSS 1.19%

  AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.