cvedb.io
CVE-2023-34335
HIGH · CVSS 7.7
EPSS exploitation probability: 0%
Published 2023-06-12T18:15:10.320 · Last modified 2026-06-17T06:03:25.073

Summary

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service.  

Affected products

ami — megarac_spx

Does this affect you?

Add your gear to cvedb and we'll alert you only when ami ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.