Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software

Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...

CVE-2022-40259

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259

CVE-2022-40259 is an Arbitrary Code Execution vulnerability in AMI MegaRAC Baseboard Management Controller (BMC) software, exploitable via the Redfish API. It is part of the MegaRAC BMC family (often listed with other BMC&C flaws) that affect multiple OEM platforms and can enable remote code exec...

CVE-2022-40259 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...