Skip to content

Vulnerabilities of AMI MegaRAC_SPx

Is your version affected?

CVE Summary Score Published
CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High Jan 9, 2024
CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent… 8.3 High Jan 9, 2024
CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High Jan 9, 2024
CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent… 8.3 High Jan 9, 2024
CVE-2023-37293 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an… 9.6 Critical Jan 9, 2024
CVE-2023-34333 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a… 7.8 High Jan 9, 2024
CVE-2023-3043 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an… 9.6 Critical Jan 9, 2024
CVE-2023-34332 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local… 7.8 High Jan 9, 2024
CVE-2023-34473 AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials 6.6 Medium Jul 5, 2023
CVE-2023-34472 AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences… 5.7 Medium Jul 5, 2023
CVE-2023-34471 AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a… 6.3 Medium Jul 5, 2023
CVE-2023-34338 AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a… 7.1 High Jul 5, 2023
CVE-2023-34337 AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based… 7.6 High Jul 5, 2023
CVE-2023-34336 AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a… 8.1 High Jun 12, 2023
CVE-2023-34335 AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI… 7.7 High Jun 12, 2023
CVE-2023-34334 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject… 7.2 High Jun 12, 2023
CVE-2023-34343 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject… 7.2 High Jun 12, 2023
CVE-2023-34342 AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under… 6.0 Medium Jun 12, 2023
CVE-2023-34341 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and… 7.2 High Jun 12, 2023
CVE-2023-34345 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access… 6.5 Medium Jun 12, 2023
CVE-2023-34344 AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess… 5.3 Medium Jun 12, 2023
CVE-2022-26872 AMI Megarac Password reset interception via API 8.3 High Jan 30, 2023

Other AMI products