Intrusion PreventionAMI.MegaRAC.SPx.CVE-2024-54085.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in AMI MegaRAC SPx.
The vulnerability is due to improper handling of authentication for functions of the software. A remote, unauthenticated attacker can exploit the vulnerability by sending malicious requests to the vulnerable system. Successful exploitation could allow an attacker to log in as an authenticated user and perform actions that can further compromise the system.
Affected Products
AMI MegaRAC SPx 12.x prior to 12.7+
AMI MegaRAC SPx 13.x prior to 13.5
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 58061 |
| Created | May 20, 2025 |
| Updated | Aug 27, 2025 |
| CVE ID | |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 8.24% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |
| Profile Type | Improper Authentication |