Megarac Sp-x (Ami) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-03-11. Vendor: Ami.

CVEs of Megarac Sp-x

• CVE-2024-54085 - CVSS 10 (critical), 2025-03-11: AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful…
• CVE-2023-37297 - CVSS 8.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this…
• CVE-2023-3043 - CVSS 9.6 (critical), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of…
• CVE-2023-37294 - CVSS 8.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this…
• CVE-2023-37293 - CVSS 9.6 (critical), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of…
• CVE-2023-37296 - CVSS 8.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this…
• CVE-2023-34333 - CVSS 7.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation…
• CVE-2023-37295 - CVSS 8.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this…
• CVE-2023-34332 - CVSS 7.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of…
• CVE-2023-34330 - CVSS 8.8 (high), 2023-07-18: AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful…
• CVE-2023-34329 - CVSS 9.1 (critical), 2023-07-18: AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this…
• CVE-2023-34472 - CVSS 6.5 (medium), 2023-07-05: AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of…
• CVE-2023-34473 - CVSS 8.8 (high), 2023-07-05: AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead…
• CVE-2023-34337 - CVSS 8.8 (high), 2023-07-05: AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A…
• CVE-2023-34471 - CVSS 8.1 (high), 2023-07-05: AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC).…
• CVE-2023-34338 - CVSS 9.8 (critical), 2023-07-05: AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful…
• CVE-2023-34342 - CVSS 9.1 (critical), 2023-06-12: AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to…
• CVE-2023-34336 - CVSS 8.8 (high), 2023-06-12: AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code…
• CVE-2023-34334 - CVSS 8.8 (high), 2023-06-12: AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to…
• CVE-2023-34343 - CVSS 8.8 (high), 2023-06-12: AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to…
• CVE-2023-34344 - CVSS 5.3 (medium), 2023-06-12: AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to…
• CVE-2023-34341 - CVSS 8.8 (high), 2023-06-12: AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the…
• CVE-2023-34345 - CVSS 6.5 (medium), 2023-06-12: AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information…
• CVE-2023-28863 - CVSS 9.1 (critical), 2023-04-18: AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.
• CVE-2023-25191 - CVSS 7.5 (high), 2023-02-15: AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00.
• CVE-2023-25192 - CVSS 5.3 (medium), 2023-02-15: AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.
• CVE-2022-26872 - CVSS 8.8 (high), 2023-01-30: AMI Megarac Password reset interception via API
• CVE-2022-40242 - CVSS 9.8 (critical), 2022-12-05: MegaRAC Default Credentials Vulnerability
• CVE-2022-2827 - CVSS 7.5 (high), 2022-12-05: AMI MegaRAC User Enumeration Vulnerability
• CVE-2022-40259 - CVSS 9.8 (critical), 2022-12-05: MegaRAC Default Credentials Vulnerability