CVE-2023-37294: Heap-based Buffer Overflow
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37294?
CVE-2023-37294 has a severity that may lead to significant security risks including loss of confidentiality, integrity, and availability.
How do I fix CVE-2023-37294?
To fix CVE-2023-37294, update the affected Ami Megarac SP-X software to the latest secure versions beyond 13.6 or 12.7.
What types of systems are affected by CVE-2023-37294?
CVE-2023-37294 affects Ami Megarac SP-X versions between 12.0 and 12.7, and 13.0 to 13.6.
What exploit can be executed using CVE-2023-37294?
An attacker can exploit CVE-2023-37294 to cause heap memory corruption via an adjacent network.
Is CVE-2023-37294 remotely exploitable?
Yes, CVE-2023-37294 can be remotely exploited by attackers within the same network segment.