Vendor

    AMI

    69 known vulnerabilities in products by AMI, 1 of them actively exploited (CISA KEV).

    Key figures

    69

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in AMI
    CriticalCVE-2024-54085

    Redfish Authentication Bypass

    In CISA KEValso in 5 other products

    9.8
    HighCVE-2022-2827

    AMI MegaRAC User Enumeration Vulnerability

    7.5
    CriticalCVE-2023-34329

    Authentication Bypass via HTTP Header Spoofing

    9.1
    HighCVE-2025-58774

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    —
    HighCVE-2025-58772

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    —
    HighCVE-2026-33197

    BDS Module Bypass Secure Boot Advisory

    —
    HighCVE-2024-42442

    Runtime Service Access outside SMRAM

    7.2
    HighCVE-2022-26872

    Password reset interception via API

    8.3
    HighCVE-2023-34334

    AMI MegaRAC_SPx: OS Command Injection

    7.2
    HighCVE-2023-34343

    AMI MegaRAC_SPx: OS Command Injection

    7.2
    HighCVE-2025-58773

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    —
    HighCVE-2025-58771

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    —
    CriticalCVE-2022-40259

    MegaRAC Default Credentials Vulnerability

    8.3
    HighCVE-2023-34336

    AMI MegaRAC_SPx: Classic Buffer Overflow

    8.1
    HighCVE-2023-34341

    AMI MegaRAC_SPx: Improper Restriction of Operations within the Bounds of a Memory Buffer

    7.2
    HighCVE-2023-34330

    Code injection via Dynamic Redfish Extension interface

    8.2
    HighCVE-2023-39539

    Failure when uploading a Logo image file

    7.5
    CriticalCVE-2022-40242

    MegaRAC Default Credentials Vulnerability

    7.5
    HighCVE-2022-40250

    AMI Aptio: Stack-based Buffer Overflow

    also in 2 other products

    8.8
    MediumCVE-2026-0893

    Uncleared Password Keystrokes Vulnerability

    —
    HighCVE-2023-25191

    AMI Megarac Sp-x: security vulnerability

    7.5
    MediumCVE-2023-34345

    AMI MegaRAC_SPx: Path Traversal

    6.5
    CriticalCVE-2023-37293

    stack-based buffer overflow

    9.6
    CriticalCVE-2023-3043

    Stack-based Buffer Overflow BMC

    9.6
    HighCVE-2025-58770

    TCG2 TPM RT Not Locked Issue

    8.8

    All vulnerabilities in search

    News

    Products