CVE-2022-2827: high-severity vulnerability in AMI MegaRAC SPx12
AMI MegaRAC User Enumeration Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
AMI MegaRAC allows attackers to discover valid usernames on the system through an enumeration vulnerability. This matters because it reduces the effort needed to launch targeted attacks, making the system easier to compromise.
A user enumeration flaw in AMI MegaRAC permits unauthenticated attackers to enumerate valid user accounts through differential response analysis. This information disclosure (CWE-200) lowers the attack surface complexity for subsequent credential-based attacks against known accounts.
In the same product, most dangerous first.