https://vulnogram.org/ Most recent CVEs assigned by AMI (ami). https://vulnogram.org/seaview/icons/ami.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-0893 https://vulnogram.org/CVE-2026-0893 AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalati… Medium Tue, 13 Oct 2026 14:02:55 GMT https://vulnogram.org/CVE-2025-58774 https://vulnogram.org/CVE-2025-58774 AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code executi… High Tue, 13 Oct 2026 14:02:30 GMT https://vulnogram.org/CVE-2025-58773 https://vulnogram.org/CVE-2025-58773 AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Co… High Tue, 13 Oct 2026 14:02:02 GMT https://vulnogram.org/CVE-2025-58772 https://vulnogram.org/CVE-2025-58772 AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impac… High Tue, 13 Oct 2026 14:01:35 GMT https://vulnogram.org/CVE-2025-58771 https://vulnogram.org/CVE-2025-58771 AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and als… High Tue, 13 Oct 2026 14:01:00 GMT https://vulnogram.org/CVE-2026-33197 https://vulnogram.org/CVE-2026-33197 AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentia… High Tue, 08 Sep 2026 14:02:30 GMT https://vulnogram.org/CVE-2025-58770 https://vulnogram.org/CVE-2025-58770 APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact… High Fri, 12 Dec 2025 15:03:16 GMT https://vulnogram.org/CVE-2025-33044 https://vulnogram.org/CVE-2025-33044 APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Inte… Medium Tue, 14 Oct 2025 14:00:58 GMT https://vulnogram.org/CVE-2025-22833 https://vulnogram.org/CVE-2025-22833 APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution. Medium Tue, 14 Oct 2025 14:00:50 GMT https://vulnogram.org/CVE-2025-22832 https://vulnogram.org/CVE-2025-22832 APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability. Medium Tue, 14 Oct 2025 14:00:42 GMT https://vulnogram.org/CVE-2025-22831 https://vulnogram.org/CVE-2025-22831 APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability. Medium Tue, 14 Oct 2025 14:00:34 GMT https://vulnogram.org/CVE-2025-33045 https://vulnogram.org/CVE-2025-33045 APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can… High Tue, 09 Sep 2025 14:00:31 GMT https://vulnogram.org/CVE-2025-22830 https://vulnogram.org/CVE-2025-22830 APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability. High Tue, 12 Aug 2025 14:02:50 GMT https://vulnogram.org/CVE-2025-22834 https://vulnogram.org/CVE-2025-22834 AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integ… Medium Tue, 12 Aug 2025 14:02:14 GMT https://vulnogram.org/CVE-2025-33043 https://vulnogram.org/CVE-2025-33043 APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity. Medium Thu, 29 May 2025 14:00:09 GMT https://vulnogram.org/CVE-2024-42446 https://vulnogram.org/CVE-2024-42446 APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution. High Tue, 13 May 2025 14:02:10 GMT https://vulnogram.org/CVE-2024-54084 https://vulnogram.org/CVE-2024-54084 APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution. High Tue, 11 Mar 2025 14:01:24 GMT https://vulnogram.org/CVE-2024-54085 https://vulnogram.org/CVE-2024-54085 AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availabili… Critical Known Exploited Network Exploitable Tue, 11 Mar 2025 14:00:58 GMT https://vulnogram.org/CVE-2024-33659 https://vulnogram.org/CVE-2024-33659 AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM leve… Medium Tue, 11 Feb 2025 15:00:11 GMT https://vulnogram.org/CVE-2024-42444 https://vulnogram.org/CVE-2024-42444 APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device. High Tue, 14 Jan 2025 15:00:42 GMT https://vulnogram.org/CVE-2024-2315 https://vulnogram.org/CVE-2024-2315 APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availabil… Medium Tue, 12 Nov 2024 15:01:15 GMT https://vulnogram.org/CVE-2024-33658 https://vulnogram.org/CVE-2024-33658 APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Successful exploitation of this vulnerability may lead to privilege escalation and potentially ar… Medium Tue, 12 Nov 2024 15:01:05 GMT https://vulnogram.org/CVE-2024-33660 https://vulnogram.org/CVE-2024-33660 An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. Medium Tue, 12 Nov 2024 15:00:51 GMT https://vulnogram.org/CVE-2024-42442 https://vulnogram.org/CVE-2024-42442 APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution out… High Tue, 12 Nov 2024 15:00:34 GMT https://vulnogram.org/CVE-2024-33657 https://vulnogram.org/CVE-2024-33657 This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks. High Wed, 21 Aug 2024 16:17:12 GMT https://vulnogram.org/CVE-2024-33656 https://vulnogram.org/CVE-2024-33656 The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms High Wed, 21 Aug 2024 16:16:43 GMT https://vulnogram.org/CVE-2023-37297 https://vulnogram.org/CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. High Tue, 09 Jan 2024 22:20:19 GMT https://vulnogram.org/CVE-2023-37296 https://vulnogram.org/CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. High Tue, 09 Jan 2024 22:19:48 GMT https://vulnogram.org/CVE-2023-37295 https://vulnogram.org/CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. High Tue, 09 Jan 2024 22:19:18 GMT https://vulnogram.org/CVE-2023-37294 https://vulnogram.org/CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. High Tue, 09 Jan 2024 22:18:45 GMT https://vulnogram.org/CVE-2023-37293 https://vulnogram.org/CVE-2023-37293 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. Critical Tue, 09 Jan 2024 22:18:05 GMT https://vulnogram.org/CVE-2023-34333 https://vulnogram.org/CVE-2023-34333 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. High Tue, 09 Jan 2024 22:17:06 GMT https://vulnogram.org/CVE-2023-3043 https://vulnogram.org/CVE-2023-3043 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. Critical Tue, 09 Jan 2024 22:15:43 GMT https://vulnogram.org/CVE-2023-34332 https://vulnogram.org/CVE-2023-34332 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. High Tue, 09 Jan 2024 22:14:28 GMT https://vulnogram.org/CVE-2023-39538 https://vulnogram.org/CVE-2023-39538 AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Avai… High Wed, 06 Dec 2023 15:17:30 GMT https://vulnogram.org/CVE-2023-39539 https://vulnogram.org/CVE-2023-39539 AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Avai… High Wed, 06 Dec 2023 15:15:06 GMT https://vulnogram.org/CVE-2023-39537 https://vulnogram.org/CVE-2023-39537 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability. High Tue, 14 Nov 2023 21:24:32 GMT https://vulnogram.org/CVE-2023-39536 https://vulnogram.org/CVE-2023-39536 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability. High Tue, 14 Nov 2023 21:24:02 GMT https://vulnogram.org/CVE-2023-39535 https://vulnogram.org/CVE-2023-39535 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability. High Tue, 14 Nov 2023 21:23:24 GMT https://vulnogram.org/CVE-2023-34470 https://vulnogram.org/CVE-2023-34470 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability. Medium Tue, 12 Sep 2023 15:21:58 GMT https://vulnogram.org/CVE-2023-34469 https://vulnogram.org/CVE-2023-34469 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality. Medium Tue, 12 Sep 2023 15:21:11 GMT https://vulnogram.org/CVE-2023-34330 https://vulnogram.org/CVE-2023-34330 AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability. High Tue, 18 Jul 2023 17:12:09 GMT https://vulnogram.org/CVE-2023-34329 https://vulnogram.org/CVE-2023-34329 AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability. Critical Tue, 18 Jul 2023 17:11:10 GMT https://vulnogram.org/CVE-2023-34473 https://vulnogram.org/CVE-2023-34473 AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability. Medium Wed, 05 Jul 2023 18:10:11 GMT https://vulnogram.org/CVE-2023-34472 https://vulnogram.org/CVE-2023-34472 AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity. Medium Wed, 05 Jul 2023 18:08:16 GMT https://vulnogram.org/CVE-2023-34471 https://vulnogram.org/CVE-2023-34471 AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity,… Medium Wed, 05 Jul 2023 18:05:43 GMT https://vulnogram.org/CVE-2023-34338 https://vulnogram.org/CVE-2023-34338 AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability. High Wed, 05 Jul 2023 18:02:37 GMT https://vulnogram.org/CVE-2023-34337 https://vulnogram.org/CVE-2023-34337 AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and av… High Wed, 05 Jul 2023 18:01:27 GMT https://vulnogram.org/CVE-2023-34336 https://vulnogram.org/CVE-2023-34336 AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of service, or escalation of privileges. High Network Exploitable Mon, 12 Jun 2023 17:08:21 GMT https://vulnogram.org/CVE-2023-34335 https://vulnogram.org/CVE-2023-34335 AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service… High Mon, 12 Jun 2023 17:06:57 GMT