AMI Vulnerabilities and Affected Products
Vulnerabilities associated with MegaRAC SPx-12.
Products
Clear product- AptioV26 vulnerabilities
- MegaRAC_SPx22 vulnerabilities
- aptio_v6 vulnerabilities
- Aptio5 vulnerabilities
- MegaRAC SPx123 vulnerabilities
- MegaRAC SPx133 vulnerabilities
- MegaRAC SPx-122 vulnerabilities
- MegaRAC SPx-132 vulnerabilities
- MegaRAC_SPx122 vulnerabilities
- MegaRAC SPx1 vulnerability
- MegaRAC-SPx1 vulnerability
- MegaRAC_SPx131 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-40258MEDIUM | Weak password hashes for Redfish & APIAMI Megarac Weak password hashes for Redfish & API CWE-916Jan 31, 2023 | CVSS5.3v3.1 | EPSS0.408% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-26872HIGH | Password reset interception via APIAMI Megarac Password reset interception via API CWE-640Jan 30, 2023 | CVSS8.3v3.1 | EPSS0.764% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |