Heap-based Buffer Overflow
CVE-2023-37295

8.3HIGH

Key Information:

Vendor

Ami

Vendor
CVE Published:
9 January 2024

What is CVE-2023-37295?

The AMI SPx product features a vulnerability within its Baseboard Management Controller (BMC), where attackers can exploit heap memory corruption through adjacent network access. This vulnerability allows for potential exploitation that could compromise critical aspects of system security including the confidentiality, integrity, and availability of sensitive information. Organizations using affected versions should take immediate steps to evaluate their network security posture and deploy necessary patches to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

MegaRAC_SPx 12 < 12.7

MegaRAC_SPx 13 < 13.6

References

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.