CRITICALCVSS 9.8Actively exploited · CISA KEV since 2025-06-25Vulnerability

CVE-2024-54085

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

Properties

Euvd product
MegaRAC-SPx
Vulnerability name
AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
First seen
2026-02-26T19:09:41+00:00
Cvss score
9.8
Epss score
0.60747
Last seen
2026-10-19T12:00:27+00:00
Due date
2025-07-16
Euvd assigner
AMI
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2025-06-25T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2025-06-25
Score
9.8
Euvd base score version
4.0
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
AMI
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
10

Related Entities (22)

AFFECTS_PRODUCT (19)

→[Product]cpe:2.3:h:netapp:sg110:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:sg6160_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:sg6160:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:sg1100_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:sgf6112_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:sgf6112:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:sg1100:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:sg110_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:ami:megarac_sp-x:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

DESCRIBES (1)

←[KEVEntry]AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

HAS_WEAKNESS (1)

→[Weakness]Authentication Bypass by Spoofing

INVOLVES (1)

←[Signal]kev_added · 2025-06-25

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2024-54085 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal