Advisories · Technology
AMI MegaRAC-SPx.
Every CVE that names AMI MegaRAC-SPx among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Redfish Authentication Bypass
- AMI MegaRAC-SPx
- Authentication bypass
- CVSS 8.3 High
heap memory overflow
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 8.3 High
Stack-based Buffer Overflow
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 8.3 High
Heap-based Buffer Overflow
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 8.3 High
Heap-based Buffer Overflow
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
stack-based buffer overflow
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 7.8 High
Untrusted Pointer Dereference
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
Stack-based Buffer Overflow BMC
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 7.8 High
Untrusted Pointer Dereference in BMC
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 6.6 Medium
Usage of Hard-coded Credentials
- AMI MegaRAC_SPx
- Hard-coded credentials
- CVSS 5.7 Medium
HTTP response splitting in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Other injection
- CVSS 6.3 Medium
Missing Cryptographic Step
- AMI MegaRAC_SPx
- CWE-325
- CVSS 7.1 High
hard coded cryptographic key
- AMI MegaRAC_SPx
- Hard-coded credentials
- CVSS 7.6 High
Inadequate Encryption Strength
- AMI MegaRAC_SPx
- Weak cryptography or TLS
- CVSS 8.1 High
Buffer overflow in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 7.7 High
Authentication bypass in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Authentication bypass
- CVSS 7.2 High
OS command injection in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Command injection
- CVSS 7.2 High
OS command injection in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Command injection
- CVSS 6.0 Medium
Path traversal in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Path traversal
- CVSS 7.2 High
Buffer overflow in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Memory corruption
- CVSS 6.5 Medium
Path traversal in AMI MegaRAC_SPx
- AMI MegaRAC_SPx
- Path traversal
- CVSS 5.3 Medium
A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username
- AMI MegaRAC_SPx
- Information disclosure