stack-based buffer overflow

CVE-2023-37293

What is CVE-2023-37293?

AMI's SPx product line contains a vulnerability within the Baseboard Management Controller (BMC) that permits an attacker to execute a stack-based buffer overflow through an adjacent network. This flaw could enable unauthorized access and manipulation of sensitive data, thus compromising the integrity, confidentiality, and availability of the system. Given the nature of network-exposed components, prompt identification and remediation of affected firmware versions are crucial for maintaining robust security against potential exploitation.

References