[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj7SWBDQp3YrVMdCS35kwGXJN1l9KHubGmNrJMFI9joM":3,"g5a-family:ami\u002Fmegarac_sp-x":111,"g5a-ex:ami\u002Fmegarac_sp-x@*":112},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":31,"kevVulnerabilities":83,"seoMetadata":89,"meta":108},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"ami","megarac_sp-x",4,30,1,"2025-03-11",[14,19,21,23],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"12",14,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"12.7",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"13",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"13.5","Megarac Sp-x by Ami is a technology product with 4 tracked versions and 30 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29,30],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},[32,39,46,52,58,61,65,70,76,80],{"cveId":33,"description":34,"publishedDate":12,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":4,"epssScore":38},"CVE-2024-54085","AMI’s SPx contains\na vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation\nof this vulnerability may lead to a loss of confidentiality, integrity, and\u002For\navailability.",9.8,"v3.1","Critical",0.60747,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":45},"CVE-2022-2827","AMI MegaRAC User Enumeration Vulnerability","2022-12-05",7.5,"High",0.01814,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":51},"CVE-2023-34329","AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.","2023-07-18",9.1,0.01186,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":57},"CVE-2023-34343","AMI BMC contains a vulnerability in the SPX REST API, where an\nattacker with the required privileges can inject arbitrary shell commands,\nwhich may lead to code execution, denial of service, information disclosure, or\ndata tampering.\n\n\n\n\n\n","2023-06-12",8.8,0.0084,{"cveId":59,"description":60,"publishedDate":55,"cvssScore":56,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":57},"CVE-2023-34334","AMI BMC contains a vulnerability in the SPX REST API, where an\nattacker with the required privileges can inject arbitrary shell commands,\nwhich may lead to code execution, denial of service, information disclosure, or\ndata tampering.\n\n \n\n\n\n\n\n\n\n",{"cveId":62,"description":63,"publishedDate":55,"cvssScore":56,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":64},"CVE-2023-34341","AMI BMC contains a vulnerability in the SPX REST API, where an\nattacker with the required privileges can read and write to arbitrary locations\nwithin the memory context of the IPMI server process, which may lead to code\nexecution, denial of service, information disclosure, or data tampering.\n\n\n\n\n\n",0.00777,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":56,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":69},"CVE-2022-26872","AMI Megarac Password reset interception via API ","2023-01-30",0.00764,{"cveId":71,"description":72,"publishedDate":55,"cvssScore":73,"cvssVersion":36,"severity":74,"isKev":18,"epssScore":75},"CVE-2023-34345","AMI BMC contains a vulnerability in the SPX REST API, where an\nattacker with the required privileges can access arbitrary files, which may\nlead to information disclosure.\n\n\n\n\n\n",6.5,"Medium",0.00719,{"cveId":77,"description":78,"publishedDate":42,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":79},"CVE-2022-40242","MegaRAC Default Credentials Vulnerability",0.0068,{"cveId":81,"description":78,"publishedDate":42,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":82},"CVE-2022-40259",0.00672,[84],{"cveId":33,"description":34,"publishedDate":12,"cvssScore":35,"severity":37,"isKev":4,"epssScore":38,"cisaVulnName":85,"cisaDateAdded":86,"cisaShortDescription":87,"cisaRequiredAction":88},"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","2025-06-25","AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and\u002For availability.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Megarac Sp-x by Ami - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Megarac Sp-x by Ami covering 4 versions with 30 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Megarac Sp-x vulnerabilities, Megarac Sp-x security, Megarac Sp-x CVE, Ami Megarac Sp-x, Megarac Sp-x threat intelligence, Ami security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Megarac Sp-x KEV, Megarac Sp-x exploited vulnerabilities",{"@context":94,"@type":95,"name":96,"description":91,"url":97,"manufacturer":98,"applicationCategory":102,"softwareVersion":103,"mainEntity":104},"https:\u002F\u002Fschema.org","SoftwareApplication","Megarac Sp-x","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fami\u002Fmegarac_sp-x",{"@type":99,"name":100,"url":101},"Organization","Ami","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fami","Security Software","4 versions tracked",{"@type":105,"name":106,"description":107,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Megarac Sp-x Security Vulnerabilities","Security vulnerabilities affecting Megarac Sp-x by Ami",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":109,"apiVersion":110},"2026-10-17T23:12:32.177Z","3.0",[],{"rows":113,"total":11,"capped":18,"failed":17},[114],{"cveId":33,"name":85,"severity":37,"cvss":35,"added":86,"epss":38,"published":115,"ranges":116,"checked":4,"hits":119,"covers":18},"2025-03-11T14:15:22.893",[117,118],"12 to before 12.7","13 to before 13.5",[]]