MS
Product
Megarac Sp-x
On CISA KEVExploited in the wild
30
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 20Medium 4Low 0
Watch
Add Megarac Sp-x to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54085 In wildKEV | 9.8 | Mar 11 | Redfish Authentication Bypass Affected: 12 before 12.7; 13 before 13.5 |
| CVE-2023-34338 | 9.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate Affected: 12; 13 |
| CVE-2022-40259 | 9.8 | Dec 5 | MegaRAC Default Credentials Vulnerability Affected: 12; 13 |
| CVE-2022-40242 | 9.8 | Dec 5 | MegaRAC Default Credentials Vulnerability Affected: 12; 13 |
| CVE-2023-34342 | 9.1 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service,… Affected: 12.0 before 12.7; 13.0 before 13.5 |
| CVE-2023-28863 | 9.1 | Apr 18 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity Affected: 12; 13 |
Showing 6