Firetruck

CVE-2024-54085

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
MegaRAC-SPxAMI / MegaRAC-SPx>= 12.0, < 12.7affected
MegaRAC-SPxAMI / MegaRAC-SPx>= 13.0, < 13.5affected