Browse CVEs

HIGH 7.8 CVE-2023-39538 AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A s… Aptio V Mitigation only Fix from $1,9502023-12-06 HIGH 7.8 CVE-2023-39539 AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A s… Aptio V Mitigation only Fix from $1,9502023-12-06 HIGH 7.8 CVE-2023-39535 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of thi… Aptio V Mitigation only Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-39536 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of thi… Aptio V Mitigation only Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-39537 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of thi… Aptio V No fix yet Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-34470 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this … Aptio V Mitigation only Fix from $1,9502023-09-12 HIGH 8.8 CVE-2023-34330 AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A success… Megarac Sp X Mitigation only Fix from $1,9502023-07-18 HIGH 8.0 CVE-2023-34329 AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit o… Megarac Sp X Mitigation only Fix from $1,9502023-07-18 HIGH 8.8 CVE-2023-34473 AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability … Megarac Sp X Mitigation only Fix from $1,9502023-07-05 MEDIUM 6.5 CVE-2023-34472 AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful ex… Megarac Sp X Mitigation only Fix from $1,6002023-07-05 CRITICAL 9.8 CVE-2023-34338 AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successf… Megarac Sp X No fix yet Fix from $2,3002023-07-05 HIGH 8.8 CVE-2023-34337 AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC)… Megarac Sp X Mitigation only Fix from $1,9502023-07-05 HIGH 8.1 CVE-2023-34471 AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication cod… Megarac Sp X Mitigation only Fix from $1,9502023-07-05 CRITICAL 9.1 CVE-2023-28863 AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity. Megarac Sp X Mitigation only Fix from $2,3002023-04-18 HIGH 7.5 CVE-2023-25191 AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00. Megarac Sp X Mitigation only Fix from $1,9502023-02-15 MEDIUM 5.3 CVE-2023-25192 AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00. Megarac Sp X Mitigation only Fix from $1,6002023-02-15 HIGH 8.8 CVE-2022-26872 AMI Megarac Password reset interception via API Megarac Sp X Mitigation only Fix from $1,9502023-01-30 CRITICAL 9.8 CVE-2022-40242 MegaRAC Default Credentials Vulnerability Megarac Sp X Mitigation only Fix from $2,3002022-12-05 CRITICAL 9.8 CVE-2022-40259 MegaRAC Default Credentials Vulnerability Megarac Sp X No fix yet Fix from $2,3002022-12-05 HIGH 7.5 CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability Megarac Sp X Mitigation only Fix from $1,9502022-12-05 HIGH 8.2 CVE-2022-40262 A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitiga… Aptio V No fix yet Fix from $1,9502022-09-20