Product by AMI
AMI MegaRAC_SPx
30 known vulnerabilities in AMI MegaRAC_SPx (AMI), 1 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-54085 | Redfish Authentication Bypass In CISA KEValso in 6 other products | 9.8 | |
| High | CVE-2022-2827 | AMI MegaRAC User Enumeration Vulnerability | 7.5 | |
| Critical | CVE-2023-34329 | Authentication Bypass via HTTP Header Spoofing | 9.1 | |
| High | CVE-2022-26872 | Password reset interception via API | 8.3 | |
| High | CVE-2023-34334 | AMI MegaRAC_SPx: OS Command Injection | 7.2 | |
| High | CVE-2023-34343 | AMI MegaRAC_SPx: OS Command Injection | 7.2 | |
| Critical | CVE-2022-40259 | MegaRAC Default Credentials Vulnerability | 8.3 | |
| High | CVE-2023-34336 | AMI MegaRAC_SPx: Classic Buffer Overflow | 8.1 | |
| High | CVE-2023-34341 | AMI MegaRAC_SPx: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.2 | |
| High | CVE-2023-34330 | Code injection via Dynamic Redfish Extension interface | 8.2 | |
| Critical | CVE-2022-40242 | MegaRAC Default Credentials Vulnerability | 7.5 | |
| High | CVE-2023-25191 | AMI Megarac Sp-x: security vulnerability | 7.5 | |
| Medium | CVE-2023-34345 | AMI MegaRAC_SPx: Path Traversal | 6.5 | |
| Critical | CVE-2023-37293 | stack-based buffer overflow | 9.6 | |
| Critical | CVE-2023-3043 | Stack-based Buffer Overflow BMC | 9.6 | |
| Critical | CVE-2023-28863 | AMI Megarac Sp-x: security vulnerability | 9.1 | |
| High | CVE-2023-34473 | Usage of Hard-coded Credentials | 6.6 | |
| Critical | CVE-2023-34342 | AMI MegaRAC_SPx: Path Traversal | 6.0 | |
| High | CVE-2023-37297 | heap memory overflow | 8.3 | |
| High | CVE-2023-37294 | Heap-based Buffer Overflow | 8.3 | |
| High | CVE-2023-37296 | Stack-based Buffer Overflow | 8.3 | |
| High | CVE-2023-37295 | Heap-based Buffer Overflow | 8.3 | |
| Medium | CVE-2023-34472 | AMI MegaRAC_SPx: HTTP Request/Response Splitting | 5.7 | |
| High | CVE-2023-34333 | Untrusted Pointer Dereference | 7.8 | |
| High | CVE-2023-34332 | Untrusted Pointer Dereference in BMC | 7.8 |