Advisories · Technology

AMI MegaRAC_SPx12.

Every CVE that names AMI MegaRAC_SPx12 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-34330 CVE record

CVSS 8.2 High

Code injection via Dynamic Redfish Extension interface
- AMI MegaRAC_SPx12
- AMI MegaRAC_SPx13
- Code injection
Not analysed yet 18 Jul 2023
CVE-2023-34329 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authentication Bypass via HTTP Header Spoofing
- AMI MegaRAC_SPx12
- Authentication bypass
Not analysed yet 18 Jul 2023
CVE-2022-2827 CVE record

CVSS 7.5 High

AMI MegaRAC User Enumeration Vulnerability
- AMI MegaRAC SPx12
- AMI MegaRAC SPx13
- Information disclosure
Not analysed yet 5 Dec 2022
CVE-2022-40259 CVE record

CVSS 8.3 High

MegaRAC Default Credentials Vulnerability
- AMI MegaRAC SPx12
- AMI MegaRAC SPx13
- Hard-coded credentials
Not analysed yet 5 Dec 2022
CVE-2022-40242 CVE record

CVSS 7.5 High

MegaRAC Default Credentials Vulnerability
- AMI MegaRAC SPx12
- AMI MegaRAC SPx13
- Hard-coded credentials
Not analysed yet 5 Dec 2022