ami Vulnerability Advisory Catalog

Total 59 security vulnerabilities recorded for ami software and firmware.

← Back to All Vendors
Component: megarac_sp-x

AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead...

📅 2023-06-12
CVSS 5.3 Dossier →
Component: megarac_sp-x

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within ...

📅 2023-06-12
CVSS 7.2 Dossier →
CVE-2023-28863 CRITICAL
Component: megarac_sp-x

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity....

📅 2023-04-18
CVSS 9.1 Dossier →
Component: megarac_sp-x

AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00....

📅 2023-02-15
CVSS 5.3 Dossier →
Component: megarac_sp-x

AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00....

📅 2023-02-15
CVSS 7.5 Dossier →
Component: megarac_spx-12

AMI Megarac Weak password hashes for Redfish & API...

📅 2023-01-31
CVSS 5.3 Dossier →
Component: megarac_sp-x

AMI Megarac Password reset interception via API...

📅 2023-01-30
CVSS 8.3 Dossier →
Component: megarac_sp-x

MegaRAC Default Credentials Vulnerability...

📅 2022-12-05
CVSS 8.3 Dossier →
Component: megarac_sp-x

MegaRAC Default Credentials Vulnerability...

📅 2022-12-05
CVSS 7.5 Dossier →
Component: megarac_sp-x

AMI MegaRAC User Enumeration Vulnerability...

📅 2022-12-05
CVSS 7.5 Dossier →
Component: aptio_v

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigat...

📅 2022-09-20
CVSS 8.2 Dossier →
Page 3 of 3 (59 Total Records)