CVE-2023-34330 is a critical vulnerability affecting AMI MegaRAC SPx Baseboard Management Controllers (BMCs), allowing authenticated attackers to inject and execute code via a Dynamic Redfish Extension interface. This flaw carries a CVSS score of 8.8 (High) due to its network-based attack vector, low complexity, and potential for complete loss of confidentiality, integrity, and availability, including the ability to brick affected servers. While not currently listed in CISA's KEV catalog and lacking public exploit code, the vulnerability has garnered significant community discussion and media attention, indicating a high level of concern within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12CPE matchmatch criteria | cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:* | ||
13CPE matchmatch criteria | cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.