Heap-based Buffer Overflow

CVE-2023-37295

What is CVE-2023-37295?

The AMI SPx product features a vulnerability within its Baseboard Management Controller (BMC), where attackers can exploit heap memory corruption through adjacent network access. This vulnerability allows for potential exploitation that could compromise critical aspects of system security including the confidentiality, integrity, and availability of sensitive information. Organizations using affected versions should take immediate steps to evaluate their network security posture and deploy necessary patches to mitigate potential risks.

References