CVE-2023-34473CWE-798

Usage of Hard-coded Credentials

Medium · published July 5, 2023

CVSS v3.1
6.6
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2023-07-05T18:10Z
EPSS history
Timeline
  • 05 JUL 18:10Z
    Usage of Hard-coded Credentials
    cvelistv5