AMI vulnerabilities
70 CVEs and advisories name AMI as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-40258Weak password hashes for Redfish & API
- CVE-2022-26872Password reset interception via API
- CVE-2022-2827AMI MegaRAC User Enumeration Vulnerability
- CVE-2022-40259MegaRAC Default Credentials Vulnerability
- CVE-2022-40242MegaRAC Default Credentials Vulnerability
- CVE-2022-40262The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.
- CVE-2022-40261SMM memory corruption vulnerability in OverClockSmiHandler SMM driver
- CVE-2022-40250Stack overflow vulnerability in SMI handler on SmmSmbiosElog.
- CVE-2022-40246Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.
- CVE-2022-26873The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.