CVE-2025-58770 | High | 8.8 | 2025-12-12 | APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploi… |
CVE-2025-33044 | High | 7.8 | 2025-10-14 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means… |
CVE-2025-22833 | High | 7.3 | 2025-10-14 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of… |
CVE-2025-22832 | High | 7.8 | 2025-10-14 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to… |
CVE-2025-22831 | High | 7.8 | 2025-10-14 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to… |
CVE-2025-33045 | High | 8.2 | 2025-09-09 | APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unautho… |
CVE-2025-22834 | Medium | 4.2 | 2025-08-12 | AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability… |
CVE-2025-22830 | Medium | 6.7 | 2025-08-12 | APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may le… |
CVE-2025-33043 | Medium | 5.8 | 2025-05-29 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can pot… |
CVE-2024-42446 | High | 7.5 | 2025-05-13 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation… |
CVE-2024-54085 | Critical | 9.8 | 2025-03-11 | AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitatio… |
CVE-2024-54084 | High | 7.5 | 2025-03-11 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation… |
CVE-2024-33659 | High | 8.8 | 2025-02-11 | AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vuln… |
CVE-2024-42444 | High | 7.5 | 2025-01-14 | APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may l… |
CVE-2024-42442 | High | 7.2 | 2024-11-12 | APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over… |
CVE-2024-33660 | Medium | 4.3 | 2024-11-12 | An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. |
CVE-2024-33658 | High | 7.8 | 2024-11-12 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Succes… |
CVE-2024-2315 | High | 7.1 | 2024-11-12 | APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to… |
CVE-2024-33657 | High | 7.8 | 2024-08-21 | This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMR… |
CVE-2024-33656 | High | 7.8 | 2024-08-21 | The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbi… |
CVE-2023-3043 | Critical | 9.6 | 2024-01-09 |
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may
cause a stack-based buffer overflow via an adjacent network. A successful exploita… |
CVE-2023-37297 | High | 8.3 | 2024-01-09 |
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this… |
CVE-2023-37296 | High | 8.3 | 2024-01-09 |
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a stack memory corruption via an adjacent network. A successful exploitation
of th… |
CVE-2023-37295 | High | 8.3 | 2024-01-09 |
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of t… |
CVE-2023-37294 | High | 8.3 | 2024-01-09 |
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of… |
CVE-2023-37293 | Critical | 9.6 | 2024-01-09 | AMI’s SPx contains
a vulnerability in the BMC where an Attacker may cause a
stack-based buffer overflow via an adjacent network. A successful exploitation
of t… |
CVE-2023-34333 | High | 7.8 | 2024-01-09 |
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may cause an
untrusted pointer to dereference via a local network. A successful expl… |
CVE-2023-34332 | High | 7.8 | 2024-01-09 |
AMI’s SPx contains
a vulnerability in the BMC where an Attacker
may cause an untrusted pointer to dereference by a local network. A successful
explo… |
CVE-2023-39539 | High | 7.5 | 2023-12-06 |
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful… |
CVE-2023-39538 | High | 7.5 | 2023-12-06 |
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful… |
CVE-2023-39537 | High | 7.5 | 2023-11-14 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerab… |
CVE-2023-39536 | High | 7.5 | 2023-11-14 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerab… |
CVE-2023-39535 | High | 7.5 | 2023-11-14 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerab… |
CVE-2023-34470 | Medium | 6.8 | 2023-09-12 |
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerabi… |
CVE-2023-34469 | Medium | 4.9 | 2023-09-12 |
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulner… |
CVE-2023-34330 | High | 8.2 | 2023-07-18 | AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploi… |
CVE-2023-34329 | Critical | 9.1 | 2023-07-18 | AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vul… |
CVE-2023-34473 | Medium | 6.6 | 2023-07-05 |
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead… |
CVE-2023-34472 | Medium | 5.7 | 2023-07-05 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of t… |
CVE-2023-34471 | Medium | 6.3 | 2023-07-05 |
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC)… |
CVE-2023-34338 | High | 7.1 | 2023-07-05 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit… |
CVE-2023-34337 | High | 7.6 | 2023-07-05 |
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A succe… |
CVE-2023-34343 | High | 7.2 | 2023-06-12 | AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can inject arbitrary shell commands,
which may lead to cod… |
CVE-2023-34342 | Medium | 6.0 | 2023-06-12 | AMI BMC contains a vulnerability in the IPMI handler, where an
attacker can upload and download arbitrary files under certain circumstances,
which may lead to… |
CVE-2023-34336 | High | 8.1 | 2023-06-12 | AMI BMC contains a vulnerability in the IPMI handler, where an
attacker with the required privileges can cause a buffer overflow, which may
lead to code execut… |
CVE-2023-34335 | High | 7.7 | 2023-06-12 | AMI BMC contains a vulnerability in the IPMI handler, where an
unauthenticated host is allowed to write to a host SPI flash, bypassing secure
boot protections… |
CVE-2023-34334 | High | 7.2 | 2023-06-12 | AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can inject arbitrary shell commands,
which may lead to cod… |
CVE-2023-34345 | Medium | 6.5 | 2023-06-12 | AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can access arbitrary files, which may
lead to information… |
CVE-2023-34344 | Medium | 5.3 | 2023-06-12 | AMI BMC contains a vulnerability in the IPMI
handler, where an unauthorized attacker can use certain oracles to guess a
valid username, which may lead to infor… |
CVE-2023-34341 | High | 7.2 | 2023-06-12 | AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can read and write to arbitrary locations
within the memor… |
CVE-2023-28863 | Critical | 9.1 | 2023-04-18 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity. |
CVE-2023-25192 | Medium | 5.3 | 2023-02-15 | AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00. |
CVE-2023-25191 | High | 7.5 | 2023-02-15 | AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00. |
CVE-2022-40258 | Medium | 5.3 | 2023-01-31 | AMI Megarac Weak password hashes for
Redfish & API |
CVE-2022-26872 | High | 8.3 | 2023-01-30 | AMI Megarac Password reset interception via API |
CVE-2022-40259 | High | 8.3 | 2022-12-05 | MegaRAC Default Credentials Vulnerability |
CVE-2022-40242 | High | 7.5 | 2022-12-05 | MegaRAC Default Credentials Vulnerability |
CVE-2022-2827 | High | 7.5 | 2022-12-05 | AMI MegaRAC User Enumeration Vulnerability |
CVE-2022-40262 | High | 8.2 | 2022-09-20 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypa… |
CVE-2022-40261 | High | 8.2 | 2022-09-20 | An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more… |
CVE-2022-40250 | High | 8.8 | 2022-09-20 | An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more… |
CVE-2022-40246 | High | 7.2 | 2022-09-20 | A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot s… |
CVE-2022-26873 | High | 8.2 | 2022-09-20 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypa… |