Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: AMI MegaRAC_SPx 12.2 Clear all filters
TI-2023-17298 CVE-2023-34473 · GHSA-r542-ppgj-v83q

Usage of Hard-coded Credentials

Priority MEDIUM 40

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2023-07-05 Fixed in 12.2 CWE-798
TI-2023-17296 CVE-2023-34471 · GHSA-296v-w233-rg6j

Missing Cryptographic Step

Priority LOW 37

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00304 Published 2023-07-05 Fixed in 12.2 CWE-325
TI-2023-17169 CVE-2023-34337 · GHSA-69h6-426q-xx8g

Inadequate Encryption Strength

Priority LOW 39

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00197 Published 2023-07-05 Fixed in 12.2 CWE-326