CVE-2024-54085criticalunder attackCWE-290

CVE-2024-54085: critical vulnerability in AMI MegaRAC-SPx

Redfish Authentication Bypass

Published · Updated

Follow this CVE+ Monitor MegaRAC SPx

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

90Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 10epss 61%
from disclosure to weapon110 days
Published on NVDMar 11
1st PoC+110d
CISA KEV+106d
Action required by CISAfederal deadline: 2025-07-16

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A vulnerability in AMI's SPx BMC allows attackers to bypass authentication on the Redfish interface without logging in, potentially giving them full access to the system's sensitive functions and data.

Technical detail

The vulnerability exists in AMI SPx's Baseboard Management Controller (BMC) Redfish Host Interface implementation, allowing remote attackers to circumvent authentication mechanisms. Successful exploitation grants unauthorized access to BMC functions, potentially compromising confidentiality, integrity, and availability of the managed system.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
AMI · MegaRAC-SPx
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.