CVE-2024-54085
AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
AMI MegaRAC SPx
CVSS
10.0CriticalExploit odds (EPSS)60.7%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV
What fixes it
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Timeline
Description
AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
Text from CVE List
Affected versions 2
- MegaRAC-SPxaffected: 12.0 before 12.7CVE List
- MegaRAC-SPxaffected: 13.0 before 13.5CVE List
References 8
- security.netapp.com/advisory/ntap-20250328-0003/Advisoryvia CVE List
- go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdfAdvisoryvia CVE List
- arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/Advisoryvia CVE List
- bleepingcomputer.com/news/security/cisa-ami-megarac-bug-that-lets-hackers-brick-servers-now-actively-exploited/Advisoryvia CVE List
- nvd.nist.gov/vuln/detail/CVE-2024-54085Referencevia CVE List
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-54085Referencevia CVE List
- eclypsium.com/blog/bmc-vulnerability-cve-2024-05485-cisa-known-exploited-vulnerabilities/Referencevia CVE List
- networkworld.com/article/4013368/ami-megarac-authentication-bypass-flaw-is-being-exploitated-cisa-warns.htmlReferencevia CVE List