7 matches found
CVE-2022-2827
AMI MegaRAC User Enumeration Vulnerability...
HPESBHF04485 rev.1 - HPE Cloudline CL4150 Using AMI MegaRac BMC Firmware, Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Escalation of Privilege, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL4150 Gen10 Server - Prior to v3.09.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...
Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...
CVE-2022-2827
AMI MegaRAC User Enumeration Vulnerability...
CVE-2022-2827
CVE-2022-2827 is an AMI MegaRAC Baseboard Management Controller [BMC] vulnerability described as a User Enumeration vulnerability via the API. Connected sources confirm the issue affects AMI MegaRAC BMCs and that patches/updates have been released by OEMs; for example, NVIDIA’s DGX Station A100 l...