Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

AMI Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-33197`BDS Module Bypass Secure Boot Advisory	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published09/08/2026	SeverityHigh
`CVE-2025-58770`TCG2 TPM RT Not Locked Issue	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published12/12/2025	SeverityHigh
`CVE-2025-33044`exFat Memory Corruption Issue	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published10/14/2025	SeverityMedium
`CVE-2025-22833`FixupArray Pointer Validation in NTFS	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published10/14/2025	SeverityMedium
`CVE-2025-22832`Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published10/14/2025	SeverityMedium
`CVE-2025-22831`Buffer Overflow in NTFS when parsing the VOLUME_NAME	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published10/14/2025	SeverityMedium
`CVE-2025-33045`Legacy Serial Redirection SMRAM Vulnerabilities	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published09/09/2025	SeverityHigh
`CVE-2025-22830`SmiFlash Race Condition Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published08/12/2025	SeverityHigh
`CVE-2025-22834`ThirdPartyVideo SetVariable Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published08/12/2025	SeverityMedium
`CVE-2025-33043`SMM buffer Integrity	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published05/29/2025	SeverityMedium
`CVE-2024-42446`TOCTOU in SmmWhea	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published05/13/2025	SeverityHigh
`CVE-2024-54084`SMM Arbitrary Write via TOCTOU Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published03/11/2025	SeverityHigh
`CVE-2024-54085`Redfish Authentication Bypass	Exploitation statusKEV	FixYes	Affected productMegaRAC-SPx	Published03/11/2025	SeverityCritical
`CVE-2024-33659`BiosGuard Buffer Overflow and TOCTOU Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published02/11/2025	SeverityMedium
`CVE-2024-42444`TOCTOU Race Condition between DMA and SMM	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published01/14/2025	SeverityHigh
`CVE-2024-2315`SMM arbitrary code execution in Overclock	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published11/12/2024	SeverityMedium
`CVE-2024-33658`Buffer Overflow Vulnerability In OFBD	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published11/12/2024	SeverityMedium
`CVE-2024-33660`Potential Firmware update without integrity check	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published11/12/2024	SeverityMedium
`CVE-2024-42442`Runtime Service Access outside SMRAM	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published11/12/2024	SeverityHigh
`CVE-2024-33657`Smm Callout in SmmComputrace Module	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published08/21/2024	SeverityHigh
`CVE-2024-33656`Memory Leak in SmmComuptrace Module	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published08/21/2024	SeverityHigh
`CVE-2023-37297`heap memory overflow	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityHigh
`CVE-2023-37296`Stack-based Buffer Overflow	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityHigh
`CVE-2023-37295`Heap-based Buffer Overflow	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityHigh
`CVE-2023-37294`Heap-based Buffer Overflow	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityHigh
`CVE-2023-37293`stack-based buffer overflow	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityCritical
`CVE-2023-34333`Untrusted Pointer Dereference	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityHigh
`CVE-2023-3043`Stack-based Buffer Overflow BMC	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityCritical
`CVE-2023-34332`Untrusted Pointer Dereference in BMC	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published01/09/2024	SeverityHigh
`CVE-2023-39538`Failure when uploading a Logo image file	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published12/06/2023	SeverityHigh
`CVE-2023-39539`Failure when uploading a Logo image file	Exploitation statusNot known exploited	FixYes	Affected productAptioV	Published12/06/2023	SeverityHigh
`CVE-2023-39537`Improper input validation in BIOS TCG2	Exploitation statusNot known exploited	FixNot confirmed	Affected productAptioV	Published11/14/2023	SeverityHigh
`CVE-2023-39536`Improper input validation in BIOS OFBD	Exploitation statusNot known exploited	FixNot confirmed	Affected productAptioV	Published11/14/2023	SeverityHigh
`CVE-2023-39535`Improper input validation in BIOS	Exploitation statusNot known exploited	FixNot confirmed	Affected productAptioV	Published11/14/2023	SeverityHigh
`CVE-2023-34470`Improper access control	Exploitation statusNot known exploited	FixNot confirmed	Affected productAptioV	Published09/12/2023	SeverityMedium
`CVE-2023-34469`Cold Rest Vulnerabiltiy	Exploitation statusNot known exploited	FixNot confirmed	Affected productAptioV	Published09/12/2023	SeverityMedium
`CVE-2023-34330`Code injection via Dynamic Redfish Extension interface	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx12	Published07/18/2023	SeverityHigh
`CVE-2023-34329`Authentication Bypass via HTTP Header Spoofing	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx12	Published07/18/2023	SeverityCritical
`CVE-2023-34473`Usage of Hard-coded Credentials	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published07/05/2023	SeverityMedium
`CVE-2023-34472`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published07/05/2023	SeverityMedium
`CVE-2023-34471`Missing Cryptographic Step	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published07/05/2023	SeverityMedium
`CVE-2023-34338`hard coded cryptographic key	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published07/05/2023	SeverityHigh
`CVE-2023-34337`Inadequate Encryption Strength	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published07/05/2023	SeverityHigh
`CVE-2023-34336`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityHigh
`CVE-2023-34335`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityHigh
`CVE-2023-34334`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityHigh
`CVE-2023-34343`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityHigh
`CVE-2023-34342`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityMedium
`CVE-2023-34341`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityHigh
`CVE-2023-34345`	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityMedium
`CVE-2023-34344`A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC_SPx	Published06/12/2023	SeverityMedium
`CVE-2023-28863`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published04/18/2023	SeverityCritical
`CVE-2023-25191`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/15/2023	SeverityHigh
`CVE-2023-25192`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/15/2023	SeverityMedium
`CVE-2022-40258`Weak password hashes for Redfish & API	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx-12	Published01/31/2023	SeverityMedium
`CVE-2022-26872`Password reset interception via API	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx-12	Published01/30/2023	SeverityHigh
`CVE-2022-2827`AMI MegaRAC User Enumeration Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx12	Published12/05/2022	SeverityHigh
`CVE-2022-40259`MegaRAC Default Credentials Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx12	Published12/05/2022	SeverityHigh
`CVE-2022-40242`MegaRAC Default Credentials Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productMegaRAC SPx12	Published12/05/2022	SeverityHigh
`CVE-2022-40262`The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.	Exploitation statusPublic exploit	FixNot confirmed	Affected productAptio	Published09/20/2022	SeverityHigh
`CVE-2022-40261`SMM memory corruption vulnerability in OverClockSmiHandler SMM driver	Exploitation statusPublic exploit	FixNot confirmed	Affected productAptio	Published09/20/2022	SeverityHigh
`CVE-2022-40250`Stack overflow vulnerability in SMI handler on SmmSmbiosElog.	Exploitation statusPublic exploit	FixNot confirmed	Affected productAptio	Published09/20/2022	SeverityHigh
`CVE-2022-40246`Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.	Exploitation statusPublic exploit	FixNot confirmed	Affected productAptio	Published09/20/2022	SeverityHigh
`CVE-2022-26873`The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.	Exploitation statusPublic exploit	FixNot confirmed	Affected productAptio	Published09/20/2022	SeverityHigh