CVE-2023-34337

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Score

CVSS 3.1 8.8 High

Status

Modified - biossecurity@ami.com

Published

2023-07-05

Last modified

2024-11-20

Weaknesses

CWE-326

Affected products

• Megarac Sp-x (Ami)
• Megarac Spx (Ami)

References

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf