CVE-2023-34338CWE-321
hard coded cryptographic key
High · published July 5, 2023
What it is
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
The record
Technical detail
- CVSS v3.1
- 7.1 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00290 · 20.4th percentile
- Weakness
- CWE-321 · Use of Hard-coded Cryptographic Key
- Published
- 2023-07-05T18:02Z
EPSS history
Timeline