Exploited Vulnerabilities DailyCVE-2024-54085: AMI MegaRAC SPx
EPSS60.7%No. 798 of 1739 in KEV
CVE year2024~1 yrs before listing
Same vendor in KEV1
Same product1
| Field | Value |
|---|---|
| Vendor | AMI |
| Product | MegaRAC SPx |
| Name | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability |
| Added to KEV | 2025-06-25 |
| US federal due date | 2025-07-16 |
| Ransomware use | Unknown |
| CWE | CWE-290 |
CISA description
AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A AMI MegaRAC SPx vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-06-25.