CVE-2023-34329criticalCWE-290CWE-306

CVE-2023-34329: critical vulnerability in AMI MegaRAC_SPx12

Authentication Bypass via HTTP Header Spoofing

Published · Updated

Follow this CVE+ Monitor MegaRAC SPx12

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 1.2%
In short

A flaw in AMI MegaRAC SPx12's BMC web interface allows attackers to bypass login by forging HTTP headers, potentially giving them full control over the system without valid credentials.

Technical detail

The BMC web service in AMI MegaRAC SPx12 fails to properly validate HTTP headers used for authentication (CWE-290, CWE-306), allowing remote attackers to spoof authentication headers and gain unauthorized access. Successful exploitation compromises confidentiality, integrity, and availability of the managed system.

Summary generated and translated by AI from the official description.
AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
AMI · MegaRAC_SPx12
Related CVEs — AMI MegaRAC_SPx12

In the same product, most dangerous first.

CVE-2023-34330HIGHCode injection via Dynamic Redfish Extension interfaceEPSS 0.6%