CVE-2023-34330: Code injection via Dynamic Redfish Extension interface
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-34330?
The severity of CVE-2023-34330 is high with a score of 8.8.
What is the affected software of CVE-2023-34330?
The affected software of CVE-2023-34330 is AMI Megarac Sp-x versions 12 and 13.
What is the vulnerability description of CVE-2023-34330?
CVE-2023-34330 is a vulnerability in the BMC of AMI SPx where a user may inject code via a Dynamic Redfish Extension interface, potentially leading to a loss of confidentiality, integrity, and availability.
How can this vulnerability be exploited?
This vulnerability can be exploited by injecting code through the Dynamic Redfish Extension interface in the BMC of AMI SPx.
Where can I find more information about CVE-2023-34330?
You can find more information about CVE-2023-34330 in the official security advisories: [link1](https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf) and [link2](https://security.netapp.com/advisory/ntap-20230814-0004/).