Stack-based Buffer Overflow BMC
CVE-2023-3043

8.8HIGH

Key Information:

Vendor

AMI

Vendor
CVE Published:
9 January 2024

What is CVE-2023-3043?

The AMI BMC within the SPx series has a stack-based buffer overflow vulnerability that can potentially be exploited by an adjacent network attacker. Exploitation of this flaw may result in unauthorized access, leading to severe compromises in confidentiality, integrity, and availability of the affected systems. Organizations using affected products are urged to implement security measures and updates to mitigate risks associated with this vulnerability.

Affected Version(s)

MegaRAC_SPx 12 < 12.7

MegaRAC_SPx 13 < 13.6

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.