CVE-2023-34344: medium-severity vulnerability in AMI MegaRAC_SPx
A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
An attacker can use timing or error message clues in the IPMI system to figure out which usernames exist, potentially learning valid account names without authorization. This information helps them prepare for further attacks.
The IPMI handler in AMI BMC contains an information disclosure vulnerability (CWE-203) that allows unauthenticated attackers to enumerate valid usernames through oracle-based side-channel attacks such as timing differences or distinct error messages. Successful exploitation requires network access to IPMI services and reveals valid account names that can facilitate subsequent unauthorized access attempts.
In the same product, most dangerous first.