Vendor
AMI
69 known vulnerabilities in products by AMI, 1 of them actively exploited (CISA KEV).
Key figures
69
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-54085 | Redfish Authentication Bypass In CISA KEValso in 5 other products | 9.8 | |
| High | CVE-2022-2827 | AMI MegaRAC User Enumeration Vulnerability | 7.5 | |
| Critical | CVE-2023-34329 | Authentication Bypass via HTTP Header Spoofing | 9.1 | |
| High | CVE-2025-58774 | UEFI OOB Write and Buffer Overflow Vulnerabilities | — | |
| High | CVE-2025-58772 | UEFI OOB Write and Buffer Overflow Vulnerabilities | — | |
| High | CVE-2026-33197 | BDS Module Bypass Secure Boot Advisory | — | |
| High | CVE-2024-42442 | Runtime Service Access outside SMRAM | 7.2 | |
| High | CVE-2022-26872 | Password reset interception via API | 8.3 | |
| High | CVE-2023-34334 | AMI MegaRAC_SPx: OS Command Injection | 7.2 | |
| High | CVE-2023-34343 | AMI MegaRAC_SPx: OS Command Injection | 7.2 | |
| High | CVE-2025-58773 | UEFI OOB Write and Buffer Overflow Vulnerabilities | — | |
| High | CVE-2025-58771 | UEFI OOB Write and Buffer Overflow Vulnerabilities | — | |
| Critical | CVE-2022-40259 | MegaRAC Default Credentials Vulnerability | 8.3 | |
| High | CVE-2023-34336 | AMI MegaRAC_SPx: Classic Buffer Overflow | 8.1 | |
| High | CVE-2023-34341 | AMI MegaRAC_SPx: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.2 | |
| High | CVE-2023-34330 | Code injection via Dynamic Redfish Extension interface | 8.2 | |
| High | CVE-2023-39539 | Failure when uploading a Logo image file | 7.5 | |
| Critical | CVE-2022-40242 | MegaRAC Default Credentials Vulnerability | 7.5 | |
| High | CVE-2022-40250 | AMI Aptio: Stack-based Buffer Overflow | 8.8 | |
| Medium | CVE-2026-0893 | Uncleared Password Keystrokes Vulnerability | — | |
| High | CVE-2023-25191 | AMI Megarac Sp-x: security vulnerability | 7.5 | |
| Medium | CVE-2023-34345 | AMI MegaRAC_SPx: Path Traversal | 6.5 | |
| Critical | CVE-2023-37293 | stack-based buffer overflow | 9.6 | |
| Critical | CVE-2023-3043 | Stack-based Buffer Overflow BMC | 9.6 | |
| High | CVE-2025-58770 | TCG2 TPM RT Not Locked Issue | 8.8 |
News
Products
| Ami Aptio V | 30 | 0 |
| AMI MegaRAC_SPx | 30 | 1 |
| AMI AptioV | 27 | 0 |
| AMI MegaRAC_SPx | 22 | 1 |
| AMI Aptio | 5 | 0 |
| Megarac Spx12 | 5 | 0 |
| Megarac Spx13 | 4 | 0 |
| Megarac Spx-12 | 3 | 0 |
| Megarac Spx-13 | 3 | 0 |