Vendor
AMI
70 known vulnerabilities.
Products
70 results · Feed
-
High 7.5
Improper input validation in BIOS TCG2
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
-
High 7.5
Improper input validation in BIOS OFBD
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
-
High 7.5
Improper input validation in BIOS
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
-
Medium 6.8
Improper access control
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
-
Medium 4.9
Cold Rest Vulnerabiltiy
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality.
-
High 8.2
Code injection via Dynamic Redfish Extension interface
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
-
High 8.4
Authentication Bypass via HTTP Header Spoofing
AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.
-
Medium 6.6
Usage of Hard-coded Credentials
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
-
Medium 5.7
AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in…
-
Medium 6.3
Missing Cryptographic Step
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and auth…
-
High 7.1
hard coded cryptographic key
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
-
High 7.6
Inadequate Encryption Strength
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availabilit…
-
High 8.1
AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer…
-
High 7.7
AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI f…
-
High 7.2
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitra…
-
High 7.2
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitra…
-
Medium 6.0
AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under c…
-
High 7.2
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write…
-
Medium 6.5
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitra…
-
Medium 5.3
A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username
AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure.
-
Medium 5.3
Weak password hashes for Redfish & API
AMI Megarac Weak password hashes for Redfish & API
-
High 8.3
Password reset interception via API
AMI Megarac Password reset interception via API
-
High 7.5
AMI MegaRAC User Enumeration Vulnerability
AMI MegaRAC User Enumeration Vulnerability
-
High 8.3
MegaRAC Default Credentials Vulnerability
MegaRAC Default Credentials Vulnerability
-
High 7.5
MegaRAC Default Credentials Vulnerability
MegaRAC Default Credentials Vulnerability
-
High 8.2
The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.
A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs)…
-
High 8.2
SMM memory corruption vulnerability in OverClockSmiHandler SMM driver
An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SM…
-
High 8.8
Stack overflow vulnerability in SMI handler on SmmSmbiosElog.
An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SM…
-
High 7.2
Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.
A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of…
-
High 8.2
The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.
A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs)…