Description
AMI BMC contains a vulnerability in the IPMI handler, where an
unauthenticated host is allowed to write to a host SPI flash, bypassing secure
boot protections. An exploitation of this vulnerability may lead to a loss of
integrity or denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMI | MegaRAC_SPx | 13.0 – < 13.5, 12.0 – ≤ 12.7 | 13.5 |