AMI Megarac Sp X vulnerabilities
30 vulnerabilities
Known vulnerabilities in AMI Megarac Sp X, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-40242amimegarac_sp-x+2
EPSS score0.68%
MegaRAC Default Credentials VulnerabilityCVE-2022-40259amimegarac_sp-x+2EPSS score0.67%
MegaRAC Default Credentials VulnerabilityCVE-2022-2827amimegarac_sp-x+2EPSS score1.81%
AMI MegaRAC User Enumeration VulnerabilityCVE-2022-26872amimegarac_sp-x+2EPSS score0.76%
AMI Megarac Password reset interception via APICVE-2024-54085amimegarac_sp-x+10KEVEPSS score60.75%
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-25191amimegarac_sp-xEPSS score0.60%
AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00.CVE-2023-25192amimegarac_sp-xEPSS score0.50%
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.CVE-2023-37297amimegarac_sp-x+1EPSS score0.26%
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-37296amimegarac_sp-x+1EPSS score0.26%
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a stack memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-37293amimegarac_sp-x+1EPSS score0.31%
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may cause a
stack-based buffer overflow via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-37295amimegarac_sp-x+1EPSS score0.26%
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-37294amimegarac_sp-x+1EPSS score0.26%
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-28863amimegarac_sp-xEPSS score0.35%
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-3043amimegarac_sp-x+1EPSS score0.31%
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may
cause a stack-based buffer overflow via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.CVE-2023-34330amimegarac_sp-x+2EPSS score0.56%
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.CVE-2023-34332amimegarac_sp-x+1EPSS score0.18%
AMI’s SPx contains
a vulnerability in the BMC where an Attacker
may cause an untrusted pointer to dereference by a local network. A successful
exploitation of this vulnerability may lead to a loss of confidentiality,
integrity, and/or availability.CVE-2023-34338amimegarac_sp-x+1EPSS score0.29%
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.CVE-2023-34336amimegarac_sp-x+1EPSS score0.66%
AMI BMC contains a vulnerability in the IPMI handler, where an
attacker with the required privileges can cause a buffer overflow, which may
lead to code execution, denial of service, or escalation of privileges.CVE-2023-34345amimegarac_sp-x+1EPSS score0.72%
AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can access arbitrary files, which may
lead to information disclosure.CVE-2023-34472amimegarac_sp-x+1EPSS score0.48%
AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity.