AMI records

62 published records for vendor ami.

Researcher profile

Entered KEV: 1 · 1.6%
Weaponized: 1 · 1.6%
Pre-auth RCE: 0
With a fix record: 45.2%
Median publish → KEV: 106 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

62 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
88Now	CVE-2024-54085Weaponized	Redfish Authentication Bypassami · megarac sp-x · CWE-290 Pre-auth Auth bypass	Critical10.0	KEV	60.7%	Mar 11, 2025
39Monitor	CVE-2022-40242No exploit	MegaRAC Default Credentials Vulnerabilityami · megarac sp-x · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.7%	Dec 5, 2022
39Monitor	CVE-2022-40259No exploit	MegaRAC Default Credentials Vulnerabilityami · megarac sp-x · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.6%	Dec 5, 2022
39Monitor	CVE-2023-34338No exploit	hard coded cryptographic keyami · megarac sp-x · CWE-321 Pre-auth Hard-coded credentials	Critical9.8	—	0.3%	Jul 5, 2023
36Monitor	CVE-2023-34342No exploit	AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances,ami · megarac sp-x · CWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Jun 12, 2023
36Monitor	CVE-2023-34335No exploit	AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing securami · megarac spx · CWE-288 Pre-auth Auth bypass	Critical9.1	—	0.4%	Jun 12, 2023
36Monitor	CVE-2023-28863No exploit	AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.ami · megarac sp-x · CWE-345 Pre-auth	Critical9.1	—	0.4%	Apr 18, 2023
35Monitor	CVE-2023-34343No exploit	AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, whami · megarac sp-x · CWE-78 RCE Command injection	High8.8	—	0.8%	Jun 12, 2023
35Monitor	CVE-2023-34334No exploit	AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, whami · megarac sp-x · CWE-78 RCE Command injection	High8.8	—	0.8%	Jun 12, 2023
35Monitor	CVE-2024-42442No exploit	Runtime Service Access outside SMRAMami · aptio v · CWE-119 Memory safety	High8.8	—	0.8%	Nov 12, 2024
35Monitor	CVE-2023-34341No exploit	AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locatioami · megarac sp-x · CWE-119 Memory safety	High8.8	—	0.8%	Jun 12, 2023
35Monitor	CVE-2022-26872No exploit	Password reset interception via APIami · megarac sp-x · CWE-640 Pre-auth	High8.8	—	0.8%	Jan 30, 2023
35Monitor	CVE-2023-34336No exploit	AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may ami · megarac sp-x · CWE-120 Memory safety	High8.8	—	0.7%	Jun 12, 2023
35Monitor	CVE-2023-34330No exploit	Code injection via Dynamic Redfish Extension interfaceami · megarac sp-x · CWE-94 RCE	High8.8	—	0.6%	Jul 18, 2023
35Monitor	CVE-2022-40250No exploit	Stack overflow vulnerability in SMI handler on SmmSmbiosElog.intel · nuc m15 laptop kit lapbc510 firmware · CWE-121 RCE Local privilege escalation Memory safety	High8.8	—	0.5%	Sep 20, 2022
35Monitor	CVE-2023-34473No exploit	Usage of Hard-coded Credentialsami · megarac sp-x · CWE-798 Hard-coded credentials	High8.8	—	0.5%	Jul 5, 2023
35Monitor	CVE-2023-3043No exploit	Stack-based Buffer Overflow BMCami · megarac sp-x · CWE-121 Pre-auth Memory safety	High8.8	—	0.3%	Jan 9, 2024
35Monitor	CVE-2023-37293No exploit	stack-based buffer overflowami · megarac sp-x · CWE-121 Pre-auth Memory safety	High8.8	—	0.3%	Jan 9, 2024
35Monitor	CVE-2023-37295No exploit	Heap-based Buffer Overflowami · megarac sp-x · CWE-122 Pre-auth Memory safety	High8.8	—	0.3%	Jan 9, 2024
35Monitor	CVE-2023-37294No exploit	Heap-based Buffer Overflowami · megarac sp-x · CWE-122 Pre-auth Memory safety	High8.8	—	0.3%	Jan 9, 2024
35Monitor	CVE-2023-37296No exploit	Stack-based Buffer Overflowami · megarac sp-x · CWE-121 Pre-auth Memory safety	High8.8	—	0.3%	Jan 9, 2024
35Monitor	CVE-2023-37297No exploit	heap memory overflowami · megarac sp-x · CWE-122 Pre-auth Memory safety	High8.8	—	0.3%	Jan 9, 2024
35Monitor	CVE-2023-34337No exploit	Inadequate Encryption Strengthami · megarac sp-x · CWE-326 Weak crypto	High8.8	—	0.2%	Jul 5, 2023
32Monitor	CVE-2023-34329No exploit	Authentication Bypass via HTTP Header Spoofingami · megarac sp-x · CWE-290 Auth bypass	High8.0	—	1.2%	Jul 18, 2023
32Monitor	CVE-2022-26873No exploit	The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.intel · nuc m15 laptop kit lapbc510 firmware · CWE-121 RCE Memory safety	High8.2	—	0.4%	Sep 20, 2022

CVE-2024-54085
88Now
Redfish Authentication Bypass
CriticalCVSS 10.0KEVWeaponizedEPSS 61%
- Pre-auth
- Auth bypass
ami · megarac sp-xMar 11, 2025
CVE-2022-40242
39Monitor
MegaRAC Default Credentials Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
ami · megarac sp-xDec 5, 2022
CVE-2022-40259
39Monitor
MegaRAC Default Credentials Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
ami · megarac sp-xDec 5, 2022
CVE-2023-34338
39Monitor
hard coded cryptographic key
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
ami · megarac sp-xJul 5, 2023
CVE-2023-34342
36Monitor
AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances,
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Path traversal
ami · megarac sp-xJun 12, 2023
CVE-2023-34335
36Monitor
AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secur
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
ami · megarac spxJun 12, 2023
CVE-2023-28863
36Monitor
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
ami · megarac sp-xApr 18, 2023
CVE-2023-34343
35Monitor
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, wh
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
ami · megarac sp-xJun 12, 2023
CVE-2023-34334
35Monitor
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, wh
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
ami · megarac sp-xJun 12, 2023
CVE-2024-42442
35Monitor
Runtime Service Access outside SMRAM
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
ami · aptio vNov 12, 2024
CVE-2023-34341
35Monitor
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locatio
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
ami · megarac sp-xJun 12, 2023
CVE-2022-26872
35Monitor
Password reset interception via API
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
ami · megarac sp-xJan 30, 2023
CVE-2023-34336
35Monitor
AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
ami · megarac sp-xJun 12, 2023
CVE-2023-34330
35Monitor
Code injection via Dynamic Redfish Extension interface
HighCVSS 8.8No exploitEPSS 1%
- RCE
ami · megarac sp-xJul 18, 2023
CVE-2022-40250
35Monitor
Stack overflow vulnerability in SMI handler on SmmSmbiosElog.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Memory safety
intel · nuc m15 laptop kit lapbc510 firmwareSep 20, 2022
CVE-2023-34473
35Monitor
Usage of Hard-coded Credentials
HighCVSS 8.8No exploitEPSS 0%
- Hard-coded credentials
ami · megarac sp-xJul 5, 2023
CVE-2023-3043
35Monitor
Stack-based Buffer Overflow BMC
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ami · megarac sp-xJan 9, 2024
CVE-2023-37293
35Monitor
stack-based buffer overflow
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ami · megarac sp-xJan 9, 2024
CVE-2023-37295
35Monitor
Heap-based Buffer Overflow
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ami · megarac sp-xJan 9, 2024
CVE-2023-37294
35Monitor
Heap-based Buffer Overflow
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ami · megarac sp-xJan 9, 2024
CVE-2023-37296
35Monitor
Stack-based Buffer Overflow
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ami · megarac sp-xJan 9, 2024
CVE-2023-37297
35Monitor
heap memory overflow
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ami · megarac sp-xJan 9, 2024
CVE-2023-34337
35Monitor
Inadequate Encryption Strength
HighCVSS 8.8No exploitEPSS 0%
- Weak crypto
ami · megarac sp-xJul 5, 2023
CVE-2023-34329
32Monitor
Authentication Bypass via HTTP Header Spoofing
HighCVSS 8.0No exploitEPSS 1%
- Auth bypass
ami · megarac sp-xJul 18, 2023
CVE-2022-26873
32Monitor
The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.
HighCVSS 8.2No exploitEPSS 0%
- RCE
- Memory safety
intel · nuc m15 laptop kit lapbc510 firmwareSep 20, 2022