AMI
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 6
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 11/08/2026, AMI recorded 6 security vulnerabilities in the last 90 days across 1 products, including 5 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, AptioV had the most security vulnerabilities in the AMI ecosystem, with 6 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2023-34343CVE-2023-34343CVE-2023-34342CVE-2023-34342CVE-2023-34341CVE-2023-34341CVE-2023-34336CVE-2023-34336CVE-2023-34335CVE-2023-34335| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2023-34343CVE-2023-34343 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | SeverityHigh |
CVE-2023-34342CVE-2023-34342 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | |
CVE-2023-34341CVE-2023-34341 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | |
CVE-2023-34336CVE-2023-34336 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | |
CVE-2023-34335CVE-2023-34335 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | |
CVE-2023-34334CVE-2023-34334 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | |
CVE-2022-40258Weak password hashes for Redfish & API | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx-12 | Published01/31/2023 | |
CVE-2022-26872Password reset interception via API | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx-12 | Published01/30/2023 | |
CVE-2022-40259MegaRAC Default Credentials Vulnerability | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx12 | Published12/05/2022 | |
CVE-2022-40242MegaRAC Default Credentials Vulnerability | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx12 | Published12/05/2022 | |
CVE-2022-2827AMI MegaRAC User Enumeration Vulnerability | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx12 | Published12/05/2022 | |
CVE-2022-40262The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase. | Exploitation statusActively exploited | FixNo | Affected productAptio | ||
CVE-2022-40261SMM memory corruption vulnerability in OverClockSmiHandler SMM driver | Exploitation statusActively exploited | FixNo | Affected productAptio | Published09/20/2022 | |
CVE-2022-40250Stack overflow vulnerability in SMI handler on SmmSmbiosElog. | Exploitation statusActively exploited | FixNo | Affected productAptio | Published09/20/2022 | |
CVE-2022-40246Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase. | Exploitation statusActively exploited | FixNo | Affected productAptio | Published | |
CVE-2022-26873The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase. | Exploitation statusActively exploited | FixNo | Affected productAptio | Published |
66 Results | Page 2 of 2
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |