AM
Vendor
Ami
70
CVEs
2
On KEV
5
New 30D
Products
AP8.7
AptioV
AMI
6 CVEs0 on KEV5 new
MS9.8
Megarac Sp-x
Ami
30 CVEs1 on KEV0 new
ME9.8
MegaRAC-SPx
AMI
2 CVEs1 on KEV0 new
AV8.8
Aptio V
Ami
30 CVEs0 on KEV0 new
MS5.3
Megarac Spx-12
Ami
1 CVEs0 on KEV0 new
MS5.3
Megarac Spx-13
Ami
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-0893 | AP AptioV AMI | 5.8 | Oct 13 | Uncleared Password Keystrokes Vulnerability |
| CVE-2025-58774 | AP AptioV AMI | 8.3 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58773 | AP AptioV AMI | 7.1 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58772 | AP AptioV AMI | 8.2 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58771 | AP AptioV AMI | 7.1 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2026-33197 | AP AptioV AMI | 8.7 | Sep 8 | BDS Module Bypass Secure Boot Advisory |
| CVE-2025-58770 | AV Aptio V Ami | 8.8 | Dec 12 | APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access |
| CVE-2025-33044 | AV Aptio V Ami | 7.8 | Oct 14 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means |
| CVE-2025-22833 | AV Aptio V Ami | 7.3 | Oct 14 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing |
| CVE-2025-22832 | AV Aptio V Ami | 7.8 | Oct 14 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local |
| CVE-2025-22831 | AV Aptio V Ami | 7.8 | Oct 14 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local |
| CVE-2025-33045 | AV Aptio V Ami | 6.7 | Sep 9 | APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through… |
| CVE-2025-22834 | AV Aptio V Ami | 5.3 | Aug 12 | AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing |
| CVE-2025-22830 | AV Aptio V Ami | 6.7 | Aug 12 | APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access |
| CVE-2025-33043 | AV Aptio V Ami | 6.1 | May 29 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally |
| CVE-2024-42446 | AV Aptio V Ami | 7.0 | May 13 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means |
| CVE-2024-54084 | AV Aptio V Ami | 7.0 | Mar 11 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means |
| CVE-2024-54085 In wildKEV | ME MegaRAC-SPx AMI | 9.8 | Mar 11 | Redfish Authentication Bypass |
| CVE-2024-33659 | AV Aptio V Ami | 8.8 | Feb 11 | AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker |
| CVE-2024-42444 | AV Aptio V Ami | 7.8 | Jan 14 | APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means |
| CVE-2024-42442 | AV Aptio V Ami | 8.8 | Nov 12 | APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network |
| CVE-2024-33660 | AV Aptio V Ami | 4.3 | Nov 12 | An exploit is possible where an actor with physical access can manipulate SPI flash without being detected |
| CVE-2024-33658 | AV Aptio V Ami | 7.8 | Nov 12 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local |
| CVE-2024-2315 | AV Aptio V Ami | 7.1 | Nov 12 | APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker |
| CVE-2024-33657 | AV Aptio V Ami | 7.8 | Aug 21 | This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space,… |
| CVE-2024-33656 | AV Aptio V Ami | 7.8 | Aug 21 | The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory |
| CVE-2023-3043 | MS Megarac Sp-x Ami | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network |
| CVE-2023-37297 | MS Megarac Sp-x Ami | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network |
| CVE-2023-37296 | MS Megarac Sp-x Ami | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network |
| CVE-2023-37295 | MS Megarac Sp-x Ami | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network |
| CVE-2023-37294 | MS Megarac Sp-x Ami | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network |
| CVE-2023-37293 | MS Megarac Sp-x Ami | 8.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network |
| CVE-2023-34333 | MS Megarac Sp-x Ami | 7.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network |
| CVE-2023-34332 | MS Megarac Sp-x Ami | 7.8 | Jan 9 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network |
| CVE-2023-39539 | AV Aptio V Ami | 7.8 | Dec 6 | AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access |
| CVE-2023-39538 | AV Aptio V Ami | 7.8 | Dec 6 | AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access |
| CVE-2023-39537 | AV Aptio V Ami | 7.8 | Nov 14 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network |
| CVE-2023-39536 | AV Aptio V Ami | 7.8 | Nov 14 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network |
| CVE-2023-39535 | AV Aptio V Ami | 7.8 | Nov 14 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network |
| CVE-2023-34470 | AV Aptio V Ami | 7.8 | Sep 12 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network |
| CVE-2023-34469 | AV Aptio V Ami | 4.6 | Sep 12 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network |
| CVE-2023-34330 | MS Megarac Sp-x Ami | 8.8 | Jul 18 | AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface |
| CVE-2023-34329 | MS Megarac Sp-x Ami | 8.0 | Jul 18 | AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header |
| CVE-2023-34473 | MS Megarac Sp-x Ami | 8.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials |
| CVE-2023-34472 | MS Megarac Sp-x Ami | 6.5 | Jul 5 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers |
| CVE-2023-34471 | MS Megarac Sp-x Ami | 8.1 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC) |
| CVE-2023-34338 | MS Megarac Sp-x Ami | 9.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate |
| CVE-2023-34337 | MS Megarac Sp-x Ami | 8.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC) |
| CVE-2023-34343 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial… |
| CVE-2023-34342 | MS Megarac Sp-x Ami | 9.1 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service,… |
| CVE-2023-34336 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of… |
| CVE-2023-34335 | MS Megarac Spx Ami | 9.1 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections |
| CVE-2023-34334 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial… |
| CVE-2023-34345 | MS Megarac Sp-x Ami | 6.5 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure |
| CVE-2023-34344 | MS Megarac Sp-x Ami | 5.3 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure |
| CVE-2023-34341 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the… |
| CVE-2023-28863 | MS Megarac Sp-x Ami | 9.1 | Apr 18 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity |
| CVE-2023-25192 | MS Megarac Sp-x Ami | 5.3 | Feb 15 | AMI MegaRAC SPX devices allow User Enumeration through Redfish |
| CVE-2023-25191 | MS Megarac Sp-x Ami | 7.5 | Feb 15 | AMI MegaRAC SPX devices allow Password Disclosure through Redfish |
| CVE-2022-40258 | MS Megarac Spx-12 Ami | 5.3 | Jan 31 | AMI Megarac Weak password hashes for Redfish & API |