[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFaet1KKFc3RO_JGmQDy_DQO_Y93Fy3ev0gNMH9dCDC0":3,"g5a-risk:CVE-2023-34329":124},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":67,"weaknesses":68,"weaknessesCount":52,"isActivelyExploited":82,"cisaInfo":29,"otxData":29,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":119,"notableEvents":120},"CVE-2023-34329","What is CVE-2023-34329?","AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.","AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this v...","2023-07-18T18:15:12.193","2025-02-13T17:16:35.73",8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":29,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"biossecurity@ami.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":24,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","NONE","CHANGED",9.1,"CRITICAL",null,2.3,6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":38,"ImpactScore":39},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":36,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":25,"Scope":37,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":24,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"ADJACENT_NETWORK","UNCHANGED",2.1,5.9,0.01186,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"ami","megarac_sp-x","12","cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"13","cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:*",2,[54,59,63,65],{"url":55,"source":56,"tags":57},"https:\u002F\u002F9443417.fs1.hubspotusercontent-na1.net\u002Fhubfs\u002F9443417\u002FSecurity%20Advisories\u002FAMI-SA-2023006.pdf","Hubspotusercontent-na1",[58],"Third Party Advisory",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230814-0004\u002F","Netapp",[],{"url":55,"source":56,"tags":64},[58],{"url":60,"source":61,"tags":66},[],4,[69,77],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"id":78,"name":79,"description":80,"extendedDescription":73,"status":81,"abstraction":75,"structure":76},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","Incomplete",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2023-34329? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-34329, a high severity cyber security vulnerability from 2023. AMI MegaRAC SPx12 contains a vulnerability in BMC where a U...","CVE-2023-34329, CVE-2023-34329 vulnerability, CVE-2023-34329 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ami security, megarac_sp-x vulnerability","\u002Fwhat-is\u002Fcve-2023-34329",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-34329","Cybersecurity","CVE-2023-34329, CVE-2023-34329 vulnerability, CVE-2023-34329 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":29,"Negate":29,"Nodes":111},[112],{"Operator":113,"Negate":29,"CPEMatch":114},"OR",[115,117],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":116,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"781C601A-7C89-48CA-A200-E5992A9BDA17",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":118,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"28ED8DD4-8626-46AC-AD64-73255EC130BD",[],[],{"lastModified":11,"cacheTime":122,"version":123},1792368450956,"2.0",{"score":125,"band":126,"action":127,"scoredAt":128},54,"Medium","Plan remediation","2026-10-16T06:58:39.625147+00:00"]