CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-03-11
AMI SPx BMC Redfish Host Interface Authentication Bypass Vulnerability (CVE-2024-54085) Security Advisory
[Affected Scope] Bare-metal servers and Baseboard Management Controller (BMC) devices utilizing AMI (American Megatrends International) SPx firmware.
[Impact] Unauthenticated remote attackers can bypass authentication via the Redfish Host Interface, leading to complete server takeover, data exfiltration, or permanent hardware destruction (bricking).
[Mitigation] Immediately apply the latest BMC firmware patches provided by your server OEM and restrict access to BMC management interfaces.