Vulnerabilities > CVE-2023-25192 - Exposure of Resource to Wrong Sphere vulnerability in AMI Megarac Sp-X 12/13
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 |