Skip to content

Ami vulnerabilities

Products

Newest

ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...CVE-2023-343347.2 HighJune 12, 2023
ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...CVE-2023-343437.2 HighJune 12, 2023
ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download...CVE-2023-343426.0 MediumJune 12, 2023
ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...CVE-2023-343417.2 HighJune 12, 2023
ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...CVE-2023-343456.5 MediumJune 12, 2023
ami megarac sp-x, megarac spx +1 moreA vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid usernameCVE-2023-343445.3 MediumJune 12, 2023
ami megarac sp-xAMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-288639.1 CriticalApril 18, 2023
ami megarac sp-xAMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12...CVE-2023-251925.3 MediumFebruary 15, 2023
ami megarac sp-xAMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12...CVE-2023-251917.5 HighFebruary 15, 2023
ami megarac spx-12, megarac spx-13 +1 moreWeak password hashes for Redfish & APICVE-2022-402585.3 MediumJanuary 31, 2023
ami megarac spx-12, megarac spx-13, megarac sp-x +2 more +4 morePassword reset interception via APICVE-2022-268728.3 HighJanuary 30, 2023
ami megarac spx12, megarac spx13, megarac sp-x +2 moreAMI MegaRAC User Enumeration VulnerabilityCVE-2022-28277.5 HighDecember 5, 2022
ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials VulnerabilityCVE-2022-402598.3 HighDecember 5, 2022
ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials VulnerabilityCVE-2022-402427.5 HighDecember 5, 2022
ami aptio, aptio v, intel server board m10jnp2sb firmware +2 moreThe arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.CVE-2022-402628.2 HighSeptember 20, 2022
ami aptio, aptio v, intel nuc m15 laptop kit lapbc510 firmware +1 more +3 moreSMM memory corruption vulnerability in OverClockSmiHandler SMM driverCVE-2022-402618.2 HighSeptember 20, 2022
ami aptio, aptio v, intel nuc m15 laptop kit lapbc510 firmware +1 more +3 moreStack overflow vulnerability in SMI handler on SmmSmbiosElog.CVE-2022-402508.8 HighSeptember 20, 2022
ami aptio, intel nuc m15 laptop kit lapbc510 firmware, nuc m15 laptop kit lapbc710 firmware +2 moreArbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.CVE-2022-402467.2 HighSeptember 20, 2022
ami aptio, aptio v, intel nuc m15 laptop kit lapbc510 firmware +1 more +3 moreThe stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.CVE-2022-268738.2 HighSeptember 20, 2022