CVE-2024-54085
CRITICAL KEVAMI MegaRAC SP-X 12-12.7 - Unauthenticated Authentication Bypass via Redfish Host Interface
Title source: llmExploitation Summary
CVE-2024-54085 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 25, 2025. EIP tracks 2 public exploits from researchers including adminlove520, Mr-Zapi.
AI-analyzed exploit summary The repository contains a scanner for CVE-2024-21762, which checks for the presence of the vulnerability in Fortinet SSL VPN interfaces. It includes Python scripts that send crafted HTTP requests to detect if a target is vulnerable.
Description
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
Exploits (2)
The repository contains a scanner for CVE-2024-21762, which checks for the presence of the vulnerability in Fortinet SSL VPN interfaces. It includes Python scripts that send crafted HTTP requests to detect if a target is vulnerable.
This PoC exploits an authentication bypass vulnerability in AMI MegaRAC BMC via Redfish Host Interface by manipulating the X-Server-Addr header to create an administrative account. The script attempts multiple headers to bypass authentication and create a new user with administrative privileges.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H