AM
Vendor
Ami
107
CVEs
2
On KEV
5
New 30D
Products
AP8.8
AptioV
AMI
32 CVEs0 on KEV5 new
MS9.8
Megarac Sp-x
Ami
30 CVEs1 on KEV0 new
ME9.8
MegaRAC_SPx
AMI
10 CVEs1 on KEV0 new
AV8.8
Aptio V
Ami
30 CVEs0 on KEV0 new
ME8.8
MegaRAC_SPx12
AMI
2 CVEs0 on KEV0 new
MS5.3
Megarac Spx-12
Ami
1 CVEs0 on KEV0 new
MS5.3
Megarac Spx-13
Ami
1 CVEs0 on KEV0 new
ME8.8
MegaRAC_SPx13
AMI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-0893 | AP AptioV AMI | 5.8 | Oct 13 | Uncleared Password Keystrokes Vulnerability |
| CVE-2025-58774 | AP AptioV AMI | 8.3 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58773 | AP AptioV AMI | 7.1 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58772 | AP AptioV AMI | 8.2 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58771 | AP AptioV AMI | 7.1 | Oct 13 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2026-33197 | AP AptioV AMI | 8.7 | Sep 8 | BDS Module Bypass Secure Boot Advisory |
| CVE-2025-58770 | AP AptioV AMI | 8.8 | Dec 12 | TCG2 TPM RT Not Locked Issue |
| CVE-2025-33044 | AP AptioV AMI | 7.8 | Oct 14 | exFat Memory Corruption Issue |
| CVE-2025-22833 | AP AptioV AMI | 7.3 | Oct 14 | FixupArray Pointer Validation in NTFS |
| CVE-2025-22832 | AP AptioV AMI | 7.8 | Oct 14 | Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST |
| CVE-2025-22831 | AP AptioV AMI | 7.8 | Oct 14 | Buffer Overflow in NTFS when parsing the VOLUME_NAME |
| CVE-2025-33045 | AP AptioV AMI | 6.7 | Sep 9 | Legacy Serial Redirection SMRAM Vulnerabilities |
| CVE-2025-22830 | AP AptioV AMI | 6.7 | Aug 12 | SmiFlash Race Condition Vulnerability |
| CVE-2025-22834 | AP AptioV AMI | 5.3 | Aug 12 | ThirdPartyVideo SetVariable Vulnerability |
| CVE-2025-33043 | AP AptioV AMI | 6.1 | May 29 | SMM buffer Integrity |
| CVE-2024-42446 | AP AptioV AMI | 7.0 | May 13 | TOCTOU in SmmWhea |
| CVE-2024-54084 | AP AptioV AMI | 7.0 | Mar 11 | SMM Arbitrary Write via TOCTOU Vulnerability |
| CVE-2024-54085 In wildKEV | ME MegaRAC-SPx AMI | 9.8 | Mar 11 | Redfish Authentication Bypass |
| CVE-2024-33659 | AP AptioV AMI | 8.8 | Feb 11 | BiosGuard Buffer Overflow and TOCTOU Vulnerability |
| CVE-2024-42444 | AP AptioV AMI | 7.8 | Jan 14 | TOCTOU Race Condition between DMA and SMM |
| CVE-2024-2315 | AP AptioV AMI | 7.1 | Nov 12 | SMM arbitrary code execution in Overclock |
| CVE-2024-33658 | AP AptioV AMI | 7.8 | Nov 12 | Buffer Overflow Vulnerability In OFBD |
| CVE-2024-33660 | AP AptioV AMI | 4.3 | Nov 12 | Potential Firmware update without integrity check |
| CVE-2024-42442 | AP AptioV AMI | 8.8 | Nov 12 | Runtime Service Access outside SMRAM |
| CVE-2024-33657 | AP AptioV AMI | 7.8 | Aug 21 | Smm Callout in SmmComputrace Module |
| CVE-2024-33656 | AP AptioV AMI | 7.8 | Aug 21 | Memory Leak in SmmComuptrace Module |
| CVE-2023-37297 | ME MegaRAC_SPx AMI | 8.8 | Jan 9 | heap memory overflow |
| CVE-2023-37296 | ME MegaRAC_SPx AMI | 8.8 | Jan 9 | Stack-based Buffer Overflow |
| CVE-2023-37295 | ME MegaRAC_SPx AMI | 8.8 | Jan 9 | Heap-based Buffer Overflow |
| CVE-2023-37294 | ME MegaRAC_SPx AMI | 8.8 | Jan 9 | Heap-based Buffer Overflow |
| CVE-2023-37293 | ME MegaRAC_SPx AMI | 8.8 | Jan 9 | stack-based buffer overflow |
| CVE-2023-34333 | ME MegaRAC_SPx AMI | 7.8 | Jan 9 | Untrusted Pointer Dereference |
| CVE-2023-3043 | ME MegaRAC_SPx AMI | 8.8 | Jan 9 | Stack-based Buffer Overflow BMC |
| CVE-2023-34332 | ME MegaRAC_SPx AMI | 7.8 | Jan 9 | Untrusted Pointer Dereference in BMC |
| CVE-2023-39538 | AP AptioV AMI | 7.8 | Dec 6 | Failure when uploading a Logo image file |
| CVE-2023-39539 | AP AptioV AMI | 7.8 | Dec 6 | Failure when uploading a Logo image file |
| CVE-2023-39537 | AP AptioV AMI | 7.8 | Nov 14 | Improper input validation in BIOS TCG2 |
| CVE-2023-39536 | AP AptioV AMI | 7.8 | Nov 14 | Improper input validation in BIOS OFBD |
| CVE-2023-39535 | AP AptioV AMI | 7.8 | Nov 14 | Improper input validation in BIOS |
| CVE-2023-34470 | AP AptioV AMI | 7.8 | Sep 12 | Improper access control |
| CVE-2023-34469 | AP AptioV AMI | 4.6 | Sep 12 | Cold Rest Vulnerabiltiy |
| CVE-2023-34330 | ME MegaRAC_SPx13 AMI | 8.8 | Jul 18 | Code injection via Dynamic Redfish Extension interface |
| CVE-2023-34329 | ME MegaRAC_SPx12 AMI | 8.0 | Jul 18 | Authentication Bypass via HTTP Header Spoofing |
| CVE-2023-34473 | MS Megarac Sp-x Ami | 8.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials |
| CVE-2023-34472 | MS Megarac Sp-x Ami | 6.5 | Jul 5 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers |
| CVE-2023-34471 | MS Megarac Sp-x Ami | 8.1 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC) |
| CVE-2023-34338 | MS Megarac Sp-x Ami | 9.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate |
| CVE-2023-34337 | MS Megarac Sp-x Ami | 8.8 | Jul 5 | AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC) |
| CVE-2023-34343 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial… |
| CVE-2023-34342 | MS Megarac Sp-x Ami | 9.1 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service,… |
| CVE-2023-34336 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of… |
| CVE-2023-34335 | MS Megarac Spx Ami | 9.1 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections |
| CVE-2023-34334 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial… |
| CVE-2023-34345 | MS Megarac Sp-x Ami | 6.5 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure |
| CVE-2023-34344 | MS Megarac Sp-x Ami | 5.3 | Jun 12 | AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username, which may lead to information disclosure |
| CVE-2023-34341 | MS Megarac Sp-x Ami | 8.8 | Jun 12 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the… |
| CVE-2023-28863 | MS Megarac Sp-x Ami | 9.1 | Apr 18 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity |
| CVE-2023-25192 | MS Megarac Sp-x Ami | 5.3 | Feb 15 | AMI MegaRAC SPX devices allow User Enumeration through Redfish |
| CVE-2023-25191 | MS Megarac Sp-x Ami | 7.5 | Feb 15 | AMI MegaRAC SPX devices allow Password Disclosure through Redfish |
| CVE-2022-40258 | MS Megarac Spx-12 Ami | 5.3 | Jan 31 | AMI Megarac Weak password hashes for Redfish & API |