Lucene search
K

15 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/23 12:0 a.m.5 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers, related to the bypassing of authentication mechanisms, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...

10CVSS7AI score0.61202EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.3 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.3CVSS7.9AI score0.00259EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.1 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.3CVSS7.9AI score0.00259EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.3 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X remote control servers is related to the use of a non-trusted pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

7.8CVSS7.2AI score0.00178EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.1 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

9.6CVSS7.8AI score0.00308EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.3 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.3CVSS7.9AI score0.00259EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.3 views

PT-2024-1584 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a heap memory corruption vulnerability in the BMC of AMI MegaRAC SP-X. This vulnerability can be exploited by an attacker via an adjacent network, potential...

8.8CVSS8.8AI score0.00259EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.4 views

PT-2024-1588 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI's SPx, where an attacker may cause an untrusted pointer to dereference via a local network. This could lead to a loss of...

7.8CVSS7.2AI score0.00178EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.5 views

PT-2024-1583 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a buffer overflow in the dynamic memory of the AMI MegaRAC SP-X firmware, which can be exploited by an attacker over the network. This may lead to a loss of...

8.8CVSS8.8AI score0.00259EPSS
Exploits0References6
Lenovo
Lenovo
added 2023/02/14 7:36 p.m.3 views

AMI MegaRAC SP-X BMC Redfish Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Lenovo
Lenovo
added 2020/11/04 3:39 p.m.13 views

AMI MegaRAC SP-X BMC Vulnerability - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Lenovo
Lenovo
added 2020/06/04 8:30 p.m.33 views

AMI MegaRAC SP-X BMC Redfish Authentication Bypass - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Lenovo
Lenovo
added 2020/06/04 8:30 p.m.41 views

AMI MegaRAC SP-X BMC Redfish Authentication Bypass - Lenovo Support US

Lenovo Security Advisory: LEN-31072 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: AMI has released AMI MegaRAC SP-X Baseboard Management Controller BMC security enhancements to address...

0.9AI score
Exploits0
Lenovo
Lenovo
added 2020/04/13 7:22 p.m.41 views

AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US

No description provided...

6.7AI score
Exploits0
Lenovo
Lenovo
added 2020/04/13 7:22 p.m.160 views

AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-29592 Potential Impact: Denial of service, privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2013-4312, CVE-2013-7446, CVE-2014-3631, CVE-2014-5206, CVE-2014-5207, CVE-2014-6410, CVE-2014-7145, CVE-2014-782...

9.3CVSS0.7AI score0.98745EPSS
Exploits105
Rows per page
Query Builder