ami Vulnerability Advisory Catalog

Total 59 security vulnerabilities recorded for ami software and firmware.

← Back to All Vendors
Component: megarac_sp-x

AMIโ€™s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploi...

๐Ÿ“… 2024-01-09
CVSS 8.3 Dossier →
CVE-2023-37293 CRITICAL
Component: megarac_sp-x

AMIโ€™s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploita...

๐Ÿ“… 2024-01-09
CVSS 9.6 Dossier →
Component: megarac_sp-x

AMIโ€™s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A succes...

๐Ÿ“… 2024-01-09
CVSS 7.8 Dossier →
Component: megarac_sp-x

AMIโ€™s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A success...

๐Ÿ“… 2024-01-09
CVSS 7.8 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A s...

๐Ÿ“… 2023-12-06
CVSS 7.5 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A s...

๐Ÿ“… 2023-12-06
CVSS 7.5 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this...

๐Ÿ“… 2023-11-14
CVSS 7.5 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this...

๐Ÿ“… 2023-11-14
CVSS 7.5 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this...

๐Ÿ“… 2023-11-14
CVSS 7.5 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this ...

๐Ÿ“… 2023-09-12
CVSS 6.8 Dossier →
Component: aptio_v

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of th...

๐Ÿ“… 2023-09-12
CVSS 4.9 Dossier →
Component: megarac_sp-x

AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successf...

๐Ÿ“… 2023-07-18
CVSS 8.2 Dossier →
CVE-2023-34329 CRITICAL
Component: megarac_sp-x

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of...

๐Ÿ“… 2023-07-18
CVSS 9.1 Dossier →
Component: megarac_sp-x

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerabilityย ...

๐Ÿ“… 2023-07-05
CVSS 6.6 Dossier →
Component: megarac_sp-x

AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exp...

๐Ÿ“… 2023-07-05
CVSS 5.7 Dossier →
Component: megarac_sp-x

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication co...

๐Ÿ“… 2023-07-05
CVSS 6.3 Dossier →
Component: megarac_sp-x

AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successfu...

๐Ÿ“… 2023-07-05
CVSS 7.1 Dossier →
Component: megarac_sp-x

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC)...

๐Ÿ“… 2023-07-05
CVSS 7.6 Dossier →
Component: megarac_sp-x

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may le...

๐Ÿ“… 2023-06-12
CVSS 7.2 Dossier →
Component: megarac_sp-x

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may...

๐Ÿ“… 2023-06-12
CVSS 6.0 Dossier →
Component: megarac_sp-x

AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to co...

๐Ÿ“… 2023-06-12
CVSS 8.1 Dossier →
Component: megarac_spx

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot pro...

๐Ÿ“… 2023-06-12
CVSS 7.7 Dossier →
Component: megarac_sp-x

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may le...

๐Ÿ“… 2023-06-12
CVSS 7.2 Dossier →
Component: megarac_sp-x

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to inf...

๐Ÿ“… 2023-06-12
CVSS 6.5 Dossier →
Page 2 of 3 (59 Total Records)