Ami Megarac_sp-x
30 CVEs affecting Ami Megarac_sp-x. Latest disclosed: 2025-03-11. Critical: 5, High: 18.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-54085 | Critical | 9.8 | 2025-03-11 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitatio… |
CVE-2023-3043 | Critical | 9.6 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploita… |
CVE-2023-37293 | Critical | 9.6 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of t… |
CVE-2023-34329 | Critical | 9.1 | 2023-07-18 | AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vul… |
CVE-2023-28863 | Critical | 9.1 | 2023-04-18 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity. |
CVE-2023-37297 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this… |
CVE-2023-37296 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of th… |
CVE-2023-37295 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of t… |
CVE-2023-37294 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of… |
CVE-2022-26872 | High | 8.3 | 2023-01-30 | AMI Megarac Password reset interception via API |
CVE-2022-40259 | High | 8.3 | 2022-12-05 | MegaRAC Default Credentials Vulnerability |
CVE-2023-34330 | High | 8.2 | 2023-07-18 | AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploi… |
CVE-2023-34336 | High | 8.1 | 2023-06-12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execut… |
CVE-2023-34333 | High | 7.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful expl… |
CVE-2023-34332 | High | 7.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful explo… |
CVE-2023-34337 | High | 7.6 | 2023-07-05 | AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A succe… |
CVE-2023-25191 | High | 7.5 | 2023-02-15 | AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00. |
CVE-2022-40242 | High | 7.5 | 2022-12-05 | MegaRAC Default Credentials Vulnerability |
CVE-2022-2827 | High | 7.5 | 2022-12-05 | AMI MegaRAC User Enumeration Vulnerability |
CVE-2023-34343 | High | 7.2 | 2023-06-12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to cod… |