CVE-2022-26872 - Password reset interception via API

Affected Software

2 affected components

AMI Megarac Sp-x=12

AMI Megarac Sp-x=13

Remediation

Information

See AMI-SA-2023001

Event History

Jan 30, 2023

CVE Published

via MITRE·03:55 PM

Data Sourced

via MITRE·03:55 PM

RemedyDescriptionSeverityWeakness

Mar 18, 2025

News Published

via BleepingComputer·03:29 PM

News Published

via BleepingComputer·03:30 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is CVE-2022-26872?

CVE-2022-26872 refers to a vulnerability in AMI Megarac SP-X that allows for interception of password reset requests via the API.

2

What is the severity of CVE-2022-26872?

CVE-2022-26872 has a severity keyword of 'high' and a CVSS score of 8.8, indicating a significant security risk.

3

How does CVE-2022-26872 affect AMI Megarac SP-X?

CVE-2022-26872 affects versions 12 and 13 of AMI Megarac SP-X, allowing an attacker to intercept password reset requests through the API.

4

Is there a fix available for CVE-2022-26872?

Yes, a fix is available for CVE-2022-26872. It is recommended to refer to the vendor's security advisory for specific steps to mitigate the vulnerability.

5

Where can I find more information about CVE-2022-26872?

More information about CVE-2022-26872 can be found in the vendor's security advisory and the NetApp advisory linked in the references.

CVE-2022-26872: Password reset interception via API