Megarac Sp X

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ami:megarac_sp-x:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAmi (0db97362-1418-5fb2-aa0a-1f52d459917d)
ProductMegarac Sp X (b6797ef6-a819-5a9b-84b5-03089b291e33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34345 vulnerable 2026-06-08 06:06:25.084325 Details available
MEDIUM (6.5)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure.
Published: 2023-06-12T16:58:01.185Z
Updated: 2025-01-03T21:09:20.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34344 vulnerable 2026-06-08 06:06:25.083978 A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username
MEDIUM (5.3)
AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure.
Published: 2023-06-12T16:54:19.265Z
Updated: 2025-01-03T21:10:15.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34343 vulnerable 2026-06-08 06:06:25.083613 Details available
HIGH (7.2)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering.
Published: 2023-06-12T17:02:37.711Z
Updated: 2025-01-03T21:07:46.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34342 vulnerable 2026-06-08 06:06:25.083046 Details available
MEDIUM (6)
AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering.
Published: 2023-06-12T17:01:33.046Z
Updated: 2025-01-03T21:08:18.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34341 vulnerable 2026-06-08 06:06:25.082550 Details available
HIGH (7.2)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering.
Published: 2023-06-12T17:00:01.049Z
Updated: 2025-01-03T21:08:58.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34336 vulnerable 2026-06-08 06:06:25.075807 Details available
HIGH (8.1)
AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of service, or escalation of privileges.  
Published: 2023-06-12T17:08:21.474Z
Updated: 2025-01-03T18:55:30.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34334 vulnerable 2026-06-08 06:06:25.074732 Details available
HIGH (7.2)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, or data tampering.  
Published: 2023-06-12T17:04:48.395Z
Updated: 2025-01-03T18:58:43.282Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.