MS
Product
Megarac Sp-x
On CISA KEVExploited in the wild
30
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 20Medium 4Low 0
Watch
Add Megarac Sp-x to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3043 | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-37297 | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-37296 | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-37295 | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-37294 | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-37293 | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-34330 | 8.8 | Jul 18 | AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface Affected: 12; 13 |
| CVE-2023-34473 | 8.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials Affected: 12; 13 |
| CVE-2023-34337 | 8.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC) Affected: 12; 13 |
| CVE-2023-34343 | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial… Affected: 12.0 before 12.7; 13.0 before 13.5 |
| CVE-2023-34336 | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of… Affected: 12.0 before 12.7; 13.0 before 13.5 |
| CVE-2023-34334 | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial… Affected: 12.0 before 12.7; 13.0 before 13.5 |
| CVE-2023-34341 | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the… Affected: 12.0 before 12.7; 13.0 before 13.5 |
| CVE-2022-26872 | 8.8 | Jan 30 | AMI Megarac Password reset interception via API Affected: 12; 13 |
| CVE-2023-34471 | 8.1 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC) Affected: 12; 13 |
| CVE-2023-34329 | 8.0 | Jul 18 | AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header Affected: 12; 13 |
| CVE-2023-34333 | 7.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-34332 | 7.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network Affected: 12 before 12.7; 13 before 13.6 |
| CVE-2023-25191 | 7.5 | Feb 15 | AMI MegaRAC SPX devices allow Password Disclosure through Redfish Affected: 12; 13 |
| CVE-2022-2827 | 7.5 | Dec 5 | AMI MegaRAC User Enumeration Vulnerability Affected: 12; 13 |
Showing 20