What’s Vulnerable › Products

AMI MegaRAC_SPx vulnerabilities

30 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your AMI MegaRAC_SPx version is affected

Exploited AMI MegaRAC_SPx vulnerabilities

• CVE-2024-54085 — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

Latest AMI MegaRAC_SPx vulnerabilities

• CVE-2024-54085 — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability (CVSS 9.8) — exploited
• CVE-2023-37297 — heap memory overflow (CVSS 8.8)
• CVE-2023-3043 — Stack-based Buffer Overflow BMC (CVSS 8.8)
• CVE-2023-37296 — Stack-based Buffer Overflow (CVSS 8.8)
• CVE-2023-37295 — Heap-based Buffer Overflow (CVSS 8.8)
• CVE-2023-37294 — Heap-based Buffer Overflow (CVSS 8.8)
• CVE-2023-37293 — stack-based buffer overflow (CVSS 8.8)
• CVE-2023-34333 — Untrusted Pointer Dereference (CVSS 7.8)
• CVE-2023-34332 — Untrusted Pointer Dereference in BMC (CVSS 7.8)
• CVE-2023-34330 — Code injection via Dynamic Redfish Extension interface (CVSS 8.8)
• CVE-2023-34329 — Authentication Bypass via HTTP Header Spoofing (CVSS 8.0)
• CVE-2023-34473 — Usage of Hard-coded Credentials (CVSS 8.8)
• CVE-2023-34472 — (CVSS 6.5)
• CVE-2023-34471 — Missing Cryptographic Step (CVSS 8.1)
• CVE-2023-34338 — hard coded cryptographic key (CVSS 9.8)
• CVE-2023-34337 — Inadequate Encryption Strength (CVSS 8.8)
• CVE-2023-34343 — (CVSS 8.8)
• CVE-2023-34342 — (CVSS 9.1)
• CVE-2023-34336 — (CVSS 8.8)
• CVE-2023-34334 — (CVSS 8.8)
• CVE-2023-34345 — (CVSS 6.5)
• CVE-2023-34344 — A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username (CVSS 5.3)
• CVE-2023-34341 — (CVSS 8.8)
• CVE-2023-28863 — (CVSS 9.1)
• CVE-2023-25192 — (CVSS 5.3)