CVE-2023-34335

CVSS V2 None CVSS V3 None

Description

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service.

Overview

CVE ID
CVE-2023-34335

Assigner
AMI

Vulnerability Status
PUBLISHED

Published Version
2023-06-12T17:06:57.116Z

Last Modified Date
2023-06-12T17:06:57.116Z

Weakness Enumerations

CWE	URL
CWE-288	http://cwe.mitre.org/data/definitions/288.html

References

Reference URL	Reference Tags
https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-34335
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34335

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 20:14:36				Added to TrackCVE