Description
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMI | MegaRAC-SPx | 12.0 – < 12.7, 13.0 – < 13.5 | 12.7 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
Mr-Zapi/CVE-2024-54085 ★ 2 · Jun 29, 2025
Just poc for CVE 2024-54085
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- ICSA-25-135-07 Siemens SIMATIC IPC RS-828A CISA ICS & IT advisories · Aug 12, 2025
- SSA-446307 SSA-446307: Authentication Bypass Vulnerability in BMC (CVE-2024-54085) affects SIMATIC IPC RS-828A Siemens ProductCERT · Aug 12, 2025