HPESBHF04485 rev.1 - HPE Cloudline CL4150 Using AMI MegaRac BMC Firmware, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Escalation of Privilege, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL4150 Gen10 Server - Prior to v3.09.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software

Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...

CVE-2022-40259

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259

CVE-2022-40259 is an Arbitrary Code Execution vulnerability in AMI MegaRAC Baseboard Management Controller (BMC) software, exploitable via the Redfish API. It is part of the MegaRAC BMC family (often listed with other BMC&C flaws) that affect multiple OEM platforms and can enable remote code exec...