Skip to content
OpenAdvisories

Product · AMI

MegaRAC-SPx

22 known vulnerabilities.

6 results · Clear filters · Feed

  • Medium 6.6

    Usage of Hard-coded Credentials

    AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

  • Medium 5.7

    AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in…

  • Medium 6.3

    Missing Cryptographic Step

    AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and auth…

  • Medium 6.0

    AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under c…

  • Medium 6.5

    AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitra…

  • Medium 5.3

    A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username

    AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure.