CVE-2023-37293

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:ami:megarac_sp-x::::::::
	cpe:2.3:o:ami:megarac_sp-x::::::::

History

12 Jan 2024, 19:18

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~9.6~~	v2 : unknown v3 : 8.8
CPE		cpe:2.3:o:ami:megarac_sp-x::::::::
First Time		Ami megarac Sp-x Ami
References	~~() https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf -~~	() https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf - Vendor Advisory
CWE		CWE-787

10 Jan 2024, 01:21

Type	Values Removed	Values Added
Summary		(es) El SPx de AMI contiene una vulnerabilidad en el BMC donde un atacante puede provocar un desbordamiento de búfer en la región stack de la memoria a través de una red adyacente. Una explotación exitosa de esta vulnerabilidad puede conducir a una pérdida de confidencialidad, integridad y/o disponibilidad.

Information

Published : 2024-01-09 23:15

Updated : 2024-01-12 19:18

NVD link : CVE-2023-37293

Mitre link : CVE-2023-37293

CVE.ORG link : CVE-2023-37293

JSON object : View

Products Affected

ami

megarac_sp-x

CWE

CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2023-37293", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "biossecurity@ami.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "published": "2024-01-09T23:15:08.413", "references": [{"url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023010.pdf", "tags": ["Vendor Advisory"], "source": "biossecurity@ami.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "biossecurity@ami.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "AMI\u2019s SPx contains\na vulnerability in the BMC where an Attacker may cause a\nstack-based buffer overflow via an adjacent network. A successful exploitation\nof this vulnerability may lead to a loss of confidentiality, integrity, and/or\navailability. \n\n\n\n\n\n\n\n"}, {"lang": "es", "value": "El SPx de AMI contiene una vulnerabilidad en el BMC donde un atacante puede provocar un desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria a trav\u00e9s de una red adyacente. Una explotaci\u00f3n exitosa de esta vulnerabilidad puede conducir a una p\u00e9rdida de confidencialidad, integridad y/o disponibilidad."}], "lastModified": "2024-01-12T19:18:51.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ami:megarac_sp-x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "402A5B6D-465C-4CC8-B75C-F96F0DE0A67C", "versionEndExcluding": "12.7", "versionStartIncluding": "12"}, {"criteria": "cpe:2.3:o:ami:megarac_sp-x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14A6F62B-9C61-4D73-B15E-205173667C76", "versionEndExcluding": "13.6", "versionStartIncluding": "13"}], "operator": "OR"}]}], "sourceIdentifier": "biossecurity@ami.com"}