CVE-2024-54085: AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

Published Mar 11, 2025
·
Updated

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

Other sources

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

NVD

Affected Software

22 affected components
AMI SPx
AMI MegaRAC SPx
AMI Megarac Sp-x>=12<12.7
AMI Megarac Sp-x>=13<13.5
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
All of the following
NetApp Sg6160 Firmware
NetApp Sg6160
All of the following
NetApp Sgf6112 Firmware
NetApp Sgf6112
All of the following
NetApp Sg110 Firmware
NetApp Sg110
All of the following
NetApp Sg1100 Firmware
NetApp Sg1100

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Remove

    Remove Ami Megarac SPx-13 from your environment.

    Discontinue use of the product if mitigations are unavailable.

  2. Compensating control

    Apply mitigations per vendor instructions and follow applicable BOD 22-01 guidance for cloud services.

Event History

Mar 11, 2025
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Mar 18, 2025
News Published
via BleepingComputer·03:29 PM
News Published
via BleepingComputer·03:30 PM
Mar 24, 2025
News Published
via The Register·05:29 AM
News Published
via The Register·05:32 AM
Apr 23, 2025
News Published
via BleepingComputer·02:50 PM
Jun 25, 2025
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Jun 26, 2025
News Published
via BleepingComputer·08:38 AM
Jun 30, 2025
News Published
via The Register·12:34 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-54085?

The vulnerability CVE-2024-54085 is considered critical due to its potential to allow remote authentication bypass.

2

How do I fix CVE-2024-54085?

To remediate CVE-2024-54085, it is recommended to apply the latest security patches provided by AMI for the SPx product.

3

What are the risks associated with CVE-2024-54085?

Exploitation of CVE-2024-54085 may result in loss of confidentiality, integrity, and availability of the system.

4

Who is affected by CVE-2024-54085?

CVE-2024-54085 affects all users of the AMI SPx BMC that utilize the Redfish Host Interface.

5

Can CVE-2024-54085 be exploited without physical access?

Yes, CVE-2024-54085 can be exploited remotely, allowing attackers to bypass authentication without physical access.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203