CVE-2023-34343: OS Command Injection
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this AMI BMC vulnerability?
The vulnerability ID for this AMI BMC vulnerability is CVE-2023-34343.
What is the severity rating of CVE-2023-34343?
CVE-2023-34343 has a severity rating of 8.8, which is considered high.
What is the affected software for CVE-2023-34343?
The affected software for CVE-2023-34343 is Ami Megarac Sp-x version 12.0 to 12.7 and version 13.0 to 13.5.
How can an attacker exploit CVE-2023-34343?
An attacker with the required privileges can exploit CVE-2023-34343 by injecting arbitrary shell commands through the SPX REST API.
Are there any references available for CVE-2023-34343?
Yes, you can find more information about CVE-2023-34343 in the following reference: [https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf](https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf)