136 matches found
CVE-2023-25192
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00...
CVE-2023-25191
AMI MegaRAC SPX devices are affected by CVE-2023-25191, which enables password disclosure through Redfish. The issue affects SPx_12-update-7.00 and SPx_13-update-5.00 fixed versions. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, no user interaction required,...
AMI MegaRAC SP-X BMC Redfish Vulnerabilities - Lenovo Support US
No description provided...
AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US
No description provided...
The vulnerabilities of Redfish components and the API of microprogramming software for AMI MegaRAC controllers allow a perpetrator to gain unauthorized access to protected information.
The vulnerability of Redfish components and the API of microprogramming software for AMI MegaRAC controllers is related to insufficient calculation of password hashes. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the application software interface for microprogrammed control devices in AMI MegaRAC allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the application software interface for AMI MegaRAC controllers is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...
Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...
CVE-2022-40258
AMI Megarac Weak password hashes for Redfish & API...
CVE-2022-40258
AMI Megarac Weak password hashes for Redfish & API...
Design/Logic Flaw
AMI Megarac Weak password hashes for Redfish & API...
CVE-2022-40258 Weak password hashes for Redfish & API
AMI Megarac Weak password hashes for Redfish & API...
CVE-2022-40258 Weak password hashes for Redfish & API
AMI Megarac Weak password hashes for Redfish & API...
CVE-2022-40258
CVE-2022-40258 affects AMI MegaRAC BMC software, describing weak password hashes for Redfish and API. Technical details from connected sources show that older MegaRAC devices use MD5 with a global salt, while newer devices use SHA-512 with per-user salts, enabling potential password cracking. Rel...
AMI MegaRAC 安全漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...
CVE-2022-26872
AMI Megarac Password reset interception via API...
CVE-2022-26872
AMI Megarac Password reset interception via API...
CVE-2022-26872
CVE-2022-26872 (AMI MegaRAC BMC): password reset interception via API could enable an attacker to alter passwords through social engineering and, if exploited, enable remote control of affected servers and deployment of malware or firmware implants. Public discussions summarize the vulnerability ...