CVE-2023-34337: AMI MegaRAC SPx

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Affected products

• AMI MegaRAC SPx: version 12 only; version 13 only

Published 2023-07-05. Last modified 2026-06-17.