Lucene search
+L

147 matches found

Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•17 views

PT-2024-1583 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a buffer overflow in the dynamic memory of the AMI MegaRAC SP-X firmware, which can be exploited by an attacker over the network. This may lead to a loss of...

8.8CVSS8.8AI score0.00259EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•13 views

AMI MegaRAC SPx Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...

8.8CVSS6.9AI score0.00259EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•21 views

PT-2024-1588 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI's SPx, where an attacker may cause an untrusted pointer to dereference via a local network. This could lead to a loss of...

7.8CVSS7.2AI score0.00178EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•15 views

AMI MegaRAC Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRAC. A...

8.8CVSS6.9AI score0.00259EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2023/07/20 4:56 p.m.•119 views

Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks

Two more security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software that, if successfully exploited, could allow threat actors to remotely commandeer vulnerable servers and deploy malware. "These new vulnerabilities range in severity from High to Critical,...

9.8CVSS10.6AI score0.01712EPSS
SaveExploits0
NVD
NVD
•added 2023/07/18 6:15 p.m.•25 views

CVE-2023-34329

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability...

9.1CVSS0.01176EPSS
SaveExploits0References2
OSV
OSV
•added 2023/07/18 6:15 p.m.•13 views

CVE-2023-34329

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability...

8CVSS5.8AI score0.01176EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/18 5:11 p.m.•34 views

CVE-2023-34329 Authentication Bypass via HTTP Header Spoofing

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability...

9.1CVSS8.6AI score0.01176EPSS
SaveExploits0References2
CVE
CVE
•added 2023/07/18 5:11 p.m.•160 views

CVE-2023-34329

CVE-2023-34329 affects AMI MegaRAC SP-X BMC (SPx12). The vulnerability enables authentication bypass by spoofing the HTTP header, potentially compromising confidentiality, integrity and availability. Documented impact is that an attacker with appropriate access could bypass authentication to perf...

9.1CVSS8.1AI score0.01176EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/07/18 12:00 a.m.•13 views

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

9.1CVSS8.4AI score0.01176EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/18 12:00 a.m.•2 views

CVE-2023-34329: Missing Authentication for Critical Function

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability...

9.1CVSS8AI score0.01176EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/18 12:00 a.m.•14 views

AMI MegaRAC 代码注入漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. AMI MegaRAC suffers from a code injection...

8.8CVSS8.9AI score0.00563EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/18 12:00 a.m.•23 views

PT-2023-24816

Name of the Vulnerable Software and Affected Versions AMI MegaRAC SPx12 affected versions not specified Description The issue allows a user to bypass authentication by spoofing the HTTP header, potentially leading to loss of confidentiality, integrity, and availability. This is achieved by...

9.1CVSS8.7AI score0.01176EPSS
SaveExploits0References11
Lenovo
Lenovo
•added 2023/07/11 8:51 p.m.•7 views

AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US

No description provided...

6.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/07/05 12:00 a.m.•15 views

AMI MegaRAC 信任管理问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

9.8CVSS8.4AI score0.0029EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/05 12:00 a.m.•14 views

AMI MegaRAC 信任管理问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

8.8CVSS8AI score0.00468EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/05 12:00 a.m.•16 views

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

6.5CVSS6.6AI score0.00482EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/05 12:00 a.m.•13 views

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

8.1CVSS7.8AI score0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/05 12:00 a.m.•16 views

AMI MegaRAC 加密问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

8.8CVSS8.1AI score0.00197EPSS
SaveExploits0References2
NVD
NVD
•added 2023/04/22 3:15 a.m.•38 views

CVE-2023-25505

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution...

7.8CVSS8AI score0.00213EPSS
SaveExploits0References1
Rows per page
Query Builder