CVE-2022-40242: high-severity vulnerability in AMI MegaRAC SPx12
MegaRAC Default Credentials Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
MegaRAC devices come with built-in usernames and passwords that are publicly known, allowing attackers to gain unauthorized access to system management interfaces. This is critical because anyone with internet access can potentially take control of these devices.
The vulnerability stems from hardcoded default credentials in MegaRAC BMC firmware (CWE-798). An unauthenticated attacker can access the web interface or IPMI services using known default credentials, bypassing authentication controls and gaining administrative privileges with no additional prerequisites.
In the same product, most dangerous first.