AMI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MegaRAC-SPx | 22 | 1 | Mar 11, 2025 |
| AptioV | 32 | – | Oct 13, 2026 |
| MegaRAC SPx12 | 5 | – | Jul 18, 2023 |
| Aptio | 5 | – | Sep 20, 2022 |
| MegaRAC SPx13 | 4 | – | Jul 18, 2023 |
| MegaRAC SPx-12 | 2 | – | Jan 31, 2023 |
| MegaRAC SPx-13 | 2 | – | Jan 31, 2023 |
Exploited and recent CVEs
- CVE-2024-54085 Redfish Authentication Bypass 60.7%
- CVE-2026-0893 Uncleared Password Keystrokes Vulnerability <0.1%
- CVE-2025-58774 UEFI OOB Write and Buffer Overflow Vulnerabilities 0.1%
- CVE-2025-58773 UEFI OOB Write and Buffer Overflow Vulnerabilities 0.1%
- CVE-2025-58772 UEFI OOB Write and Buffer Overflow Vulnerabilities 0.1%
- CVE-2025-58771 UEFI OOB Write and Buffer Overflow Vulnerabilities 0.1%
- CVE-2026-33197 BDS Module Bypass Secure Boot Advisory 0.2%
- CVE-2025-58770 TCG2 TPM RT Not Locked Issue 0.1%
- CVE-2025-33044 exFat Memory Corruption Issue 0.2%
- CVE-2025-22833 FixupArray Pointer Validation in NTFS 0.2%
- CVE-2025-22832 Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST 0.2%
- CVE-2025-22831 Buffer Overflow in NTFS when parsing the VOLUME_NAME 0.2%
- CVE-2025-33045 Legacy Serial Redirection SMRAM Vulnerabilities 0.2%
- CVE-2025-22830 SmiFlash Race Condition Vulnerability 0.1%
- CVE-2025-22834 ThirdPartyVideo SetVariable Vulnerability 0.1%
- CVE-2025-33043 SMM buffer Integrity 0.2%
- CVE-2024-42446 TOCTOU in SmmWhea 0.1%
- CVE-2024-54084 SMM Arbitrary Write via TOCTOU Vulnerability 0.1%
- CVE-2024-33659 BiosGuard Buffer Overflow and TOCTOU Vulnerability 0.2%
- CVE-2024-42444 TOCTOU Race Condition between DMA and SMM 0.1%
- CVE-2024-2315 SMM arbitrary code execution in Overclock 0.1%
- CVE-2024-33658 Buffer Overflow Vulnerability In OFBD 0.2%
- CVE-2024-33660 Potential Firmware update without integrity check 0.1%
- CVE-2024-42442 Runtime Service Access outside SMRAM 0.8%
- CVE-2024-33657 Smm Callout in SmmComputrace Module 0.2%
- CVE-2024-33656 Memory Leak in SmmComuptrace Module 0.2%
- CVE-2023-37297 heap memory overflow 0.3%
- CVE-2023-37296 Stack-based Buffer Overflow 0.3%
- CVE-2023-37295 Heap-based Buffer Overflow 0.3%
- CVE-2023-37294 Heap-based Buffer Overflow 0.3%