Skip to content
OpenAdvisories
High · 8.2 CVE-2023-34330 EUVD-2023-38411GHSA-mmj4-xg4v-p3xp

Code injection via Dynamic Redfish Extension interface

Published Jul 18, 2023 · Updated Feb 13, 2025 · Assigned by AMI

Description

AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Affected products

VendorProductAffectedFixed
AMI MegaRAC_SPx12 12.0 – < 12.4 12.4
AMI MegaRAC_SPx13 13.0 – < 13.2 13.2

References