coldbraid

CVE-2024-54085 AMI MegaRAC SPx

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

CVSS
not scored

CWE-290

On CISA’s exploited list

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

Added
2025-06-25
Federal patch deadline
2025-07-16
Ransomware use
not known