CVE-2023-34471CWE-325

Missing Cryptographic Step

Medium · published July 5, 2023

CVSS v3.1
6.3
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00304 · 22.0th percentile
Weakness
CWE-325 · Missing Cryptographic Step
Published
2023-07-05T18:05Z
EPSS history
Timeline
  • 05 JUL 18:05Z
    Missing Cryptographic Step
    cvelistv5