New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking

🗓️ 18 Mar 2025 13:31:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 37 Views

Critical AMI BMC vulnerability allows remote server takeover, malware deployment, and bricking potential.

Reporter	Title	Published	Views	Family All 112
ATTACKERKB	CVE-2024-54085	11 Mar 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the OpenSSL library in the TYCHON network endpoint management tool allows a hacker to execute arbitrary code with SYSTEM privileges.	13 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the API interface of the Redfish microprogramming software for remote control controllers AMI MegaRAC allows a perpetrator to execute arbitrary code.	8 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the AMI MegaRAC Baseboard Management Controller (BMC) allows a intruder to gain full access to the device.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Redfish components and the API of microprogramming software for AMI MegaRAC controllers allow a perpetrator to gain unauthorized access to protected information.	9 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface for microprogrammed control devices in AMI MegaRAC allows a perpetrator to gain unauthorized access to protected information.	9 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers, related to the bypassing of authentication mechanisms, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.	23 Jun 202500:00	–	bdu_fstec
Broadcom	CVE-2022-40259, CVE-2022-40242, CVE-2022-2827 -- Vulnerabilities in AMI MegaRAC Baseboard Management Controller (BMC) software.(BSA-2022-2147)	9 Dec 202200:00	–	broadcom
Broadcom	AMI Security Advisory AMI-SA-2025003 (CVE-2024-54084,CVE-2024-54085)	1 May 202500:00	–	broadcom
Circl	CVE-2022-26872	30 Jan 202318:36	–	circl

19 Mar 2025 03:45Current

8.7High risk

Vulners AI Score8.7

CVSS 410

CVSS 3.19.8

EPSS0.61063

SSVC

ami bmc vulnerability remote server takeover maximum severity malware deployment bricking motherboard.