10.0
Critique
Exploitée
CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-290
Description
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MegaRAC-SPx 13.0 | 13.0 → < 13.5 | 13.5 |
| MegaRAC-SPx 12.0 | 12.0 → < 12.7 | 12.7 |
Références
- go.ami.com go.ami.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification