Database/Firmware, BMC & network fabric
AMI MegaRAC SPx (BMC heap memory corruption): Further unauthenticated heap corruption in the MegaRAC BMC reachable
CVE-2023-37295Firmware, BMC & network fabriccurated
Impact
Further unauthenticated heap corruption in the MegaRAC BMC reachable from an adjacent network.
Who can reach it
Adjacent-network access to the BMC.
What to do
Obtain and flash updated BMC firmware from your board OEM.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.