Skip to contentAmi Megarac Sp-x vulnerabilities
- ami megarac spx, megarac-spx, megarac sp-x +9 more +11 moreRedfish Authentication BypassCVE-2024-54085In KEVPublic exploitEPSS 60.7%10.0 Critical
- ami megarac sp-x, megarac spx +1 moreheap memory overflowCVE-2023-372978.3 High
- ami megarac sp-x, megarac spx +1 moreStack-based Buffer OverflowCVE-2023-372968.3 High
- ami megarac sp-x, megarac spx +1 moreHeap-based Buffer OverflowCVE-2023-372958.3 High
- ami megarac sp-x, megarac spx +1 moreHeap-based Buffer OverflowCVE-2023-372948.3 High
- ami megarac sp-x, megarac spx +1 morestack-based buffer overflowCVE-2023-372939.6 Critical
- ami megarac sp-x, megarac spx +1 moreUntrusted Pointer DereferenceCVE-2023-343337.8 High
- ami megarac sp-x, megarac spx +1 moreStack-based Buffer Overflow BMCCVE-2023-30439.6 Critical
- ami megarac sp-x, megarac spx +1 moreUntrusted Pointer Dereference in BMCCVE-2023-343327.8 High
- ami megarac sp-x, megarac spx12, megarac spx13 +2 moreCode injection via Dynamic Redfish Extension interfaceCVE-2023-343308.2 High
- ami megarac spx12, megarac sp-x +1 moreAuthentication Bypass via HTTP Header SpoofingCVE-2023-343299.1 Critical
- ami megarac sp-x, megarac spx +1 moreUsage of Hard-coded CredentialsCVE-2023-344736.6 Medium
- ami megarac sp-x, megarac spx +1 moreAMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper...CVE-2023-344725.7 Medium
- ami megarac sp-x, megarac spx +1 moreMissing Cryptographic StepCVE-2023-344716.3 Medium
- ami megarac sp-x, megarac spx +1 morehard coded cryptographic keyCVE-2023-343387.1 High
- ami megarac sp-x, megarac spx +1 moreInadequate Encryption StrengthCVE-2023-343377.6 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the IPMI handler, where an
attacker with the required...CVE-2023-343368.1 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required...CVE-2023-343347.2 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required...CVE-2023-343437.2 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the IPMI handler, where an
attacker can upload and download...CVE-2023-343426.0 Medium
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required...CVE-2023-343417.2 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required...CVE-2023-343456.5 Medium
- ami megarac sp-x, megarac spx +1 moreA vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid usernameCVE-2023-343445.3 Medium
- ami megarac sp-xAMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-288639.1 Critical
- ami megarac sp-xAMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12...CVE-2023-251925.3 Medium
- ami megarac sp-xAMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12...CVE-2023-251917.5 High
- ami megarac spx-12, megarac spx-13, megarac sp-x +2 more +4 morePassword reset interception via APICVE-2022-268728.3 High
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreAMI MegaRAC User Enumeration VulnerabilityCVE-2022-28277.5 High
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials VulnerabilityCVE-2022-402598.3 High
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials VulnerabilityCVE-2022-402427.5 High