Actively exploited vulnerabilities affecting AMI products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2024-54085https://wildfortech.com/security#CVE-2024-54085AMI MegaRAC SPx is a baseboard management controller (BMC) firmware used in servers from many major manufacturers. This vulnerability allows an attacker to bypass authentication through spoofing on the Redfish Host Interface — a standard API used for out-of-band server management. Because BMCs operate independently of the main OS and have deep hardware-level access, a successful exploit could give an attacker persistent, low-level control over affected servers, risking full compromise of confidentiality, integrity, and availability.Wed, 25 Jun 2025 00:00:00 GMTAMIMegaRAC SPx