CVE-2023-25192

AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2023-02-15

Last modified

2025-03-19

Weaknesses

CWE-668

Affected products

• Megarac Sp-x (Ami)

References

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf