AMI vulnerabilities
70 CVEs and advisories name AMI as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-37297heap memory overflow
- CVE-2023-37296Stack-based Buffer Overflow
- CVE-2023-37295Heap-based Buffer Overflow
- CVE-2023-37294Heap-based Buffer Overflow
- CVE-2023-37293stack-based buffer overflow
- CVE-2023-34333Untrusted Pointer Dereference
- CVE-2023-3043Stack-based Buffer Overflow BMC
- CVE-2023-34332Untrusted Pointer Dereference in BMC
- CVE-2023-39538Failure when uploading a Logo image file
- CVE-2023-39539Failure when uploading a Logo image file
- CVE-2023-39537Improper input validation in BIOS TCG2
- CVE-2023-39536Improper input validation in BIOS OFBD
- CVE-2023-39535Improper input validation in BIOS
- CVE-2023-34470Improper access control
- CVE-2023-34469Cold Rest Vulnerabiltiy
- CVE-2023-34330Code injection via Dynamic Redfish Extension interface
- CVE-2023-34329Authentication Bypass via HTTP Header Spoofing
- CVE-2023-34473Usage of Hard-coded Credentials
- CVE-2023-34472AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers.
- CVE-2023-34471Missing Cryptographic Step
- CVE-2023-34338hard coded cryptographic key
- CVE-2023-34337Inadequate Encryption Strength
- CVE-2023-34336AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may
- CVE-2023-34335AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secur
- CVE-2023-34334AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, wh
- CVE-2023-34343AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, wh
- CVE-2023-34342AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances,
- CVE-2023-34341AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locatio
- CVE-2023-34345AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may l
- CVE-2023-34344A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username