{ "id": "CVE-2023-34473", "sourceIdentifier": "biossecurity@ami.com", "published": "2023-07-05T19:15:10.083", "lastModified": "2023-07-05T19:15:10.083", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "\nAMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability\u00a0may lead to a loss of confidentiality, integrity, and availability. \n\n" } ], "metrics": { "cvssMetricV31": [ { "source": "biossecurity@ami.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM" }, "exploitabilityScore": 0.7, "impactScore": 5.9 } ] }, "weaknesses": [ { "source": "biossecurity@ami.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-798" } ] } ], "references": [ { "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf", "source": "biossecurity@ami.com" } ] }