AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
AMI · MegaRAC SPx
Date added (CISA)
2025-06-25
Remediation due
2025-07-16
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.