Skip to content
OpenAdvisories
High · 8.4 CVE-2023-34329 EUVD-2023-38410GHSA-7qr2-m63g-5xr4

Authentication Bypass via HTTP Header Spoofing

Published Jul 18, 2023 · Updated Feb 13, 2025 · Assigned by AMI

Description

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

Affected products

VendorProductAffectedFixed
AMI MegaRAC_SPx12 12.0 – < 12.4 12.4

References