Advisories · Technology

AMI MegaRAC SPx-12.

Every CVE that names AMI MegaRAC SPx-12 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-40258 CVE record

CVSS 5.3 Medium

Weak password hashes for Redfish & API
- AMI MegaRAC SPx-12
- AMI MegaRAC SPx-13
- Weak cryptography or TLS
Not analysed yet 31 Jan 2023
CVE-2022-26872 CVE record

CVSS 8.3 High

Password reset interception via API
- AMI MegaRAC SPx-12
- AMI MegaRAC SPx-13
- CWE-640
Not analysed yet 30 Jan 2023