Product by AMI
AMI MegaRAC_SPx
22 known vulnerabilities in AMI MegaRAC_SPx (AMI), 1 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-54085 | Redfish Authentication Bypass In CISA KEValso in 6 other products | 9.8 | |
| High | CVE-2023-34334 | AMI MegaRAC_SPx: OS Command Injection | 7.2 | |
| High | CVE-2023-34343 | AMI MegaRAC_SPx: OS Command Injection | 7.2 | |
| High | CVE-2023-34336 | AMI MegaRAC_SPx: Classic Buffer Overflow | 8.1 | |
| High | CVE-2023-34341 | AMI MegaRAC_SPx: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.2 | |
| Medium | CVE-2023-34345 | AMI MegaRAC_SPx: Path Traversal | 6.5 | |
| Critical | CVE-2023-37293 | stack-based buffer overflow | 9.6 | |
| Critical | CVE-2023-3043 | Stack-based Buffer Overflow BMC | 9.6 | |
| Critical | CVE-2023-34335 | AMI MegaRAC_SPx: Authentication Bypass Using an Alternate Path or Channel | 7.7 | |
| High | CVE-2023-34473 | Usage of Hard-coded Credentials | 6.6 | |
| Critical | CVE-2023-34342 | AMI MegaRAC_SPx: Path Traversal | 6.0 | |
| High | CVE-2023-37297 | heap memory overflow | 8.3 | |
| High | CVE-2023-37296 | Stack-based Buffer Overflow | 8.3 | |
| High | CVE-2023-37295 | Heap-based Buffer Overflow | 8.3 | |
| High | CVE-2023-37294 | Heap-based Buffer Overflow | 8.3 | |
| Medium | CVE-2023-34472 | AMI MegaRAC_SPx: HTTP Request/Response Splitting | 5.7 | |
| High | CVE-2023-34332 | Untrusted Pointer Dereference in BMC | 7.8 | |
| High | CVE-2023-34333 | Untrusted Pointer Dereference | 7.8 | |
| Critical | CVE-2023-34338 | hard coded cryptographic key | 7.1 | |
| High | CVE-2023-34337 | Inadequate Encryption Strength | 7.6 | |
| Medium | CVE-2023-34344 | AMI MegaRAC_SPx: Observable Discrepancy | 5.3 | |
| High | CVE-2023-34471 | Missing Cryptographic Step | 6.3 |