What’s Vulnerable › Vulnerabilities

CVE-2023-34329: Authentication Bypass via HTTP Header Spoofing

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-18 · updated 2026-06-17
• Weakness: CWE-290

Description

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

Affected products

• AMI MegaRAC_SPx: 12, 13

References

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
• https://security.netapp.com/advisory/ntap-20230814-0004/
• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
• https://security.netapp.com/advisory/ntap-20230814-0004/

Get alerted when CVE-2023-34329 or the next vulnerability affects your stack