Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Ami
Megarac Spx

AMI MegaRAC_SPx Vulnerabilities: CVEs, CISA KEV & Security Advisories

22 CVEs

AM

AMI MegaRAC_SPx Vulnerabilities

CVE security advisories and vulnerability history for MegaRAC_SPx by AMI.

22

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.4

Avg CVSS

2023–2024

Last updated January 9, 2024

Overview

AMI MegaRAC_SPx has 22 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.4. Affected platforms include arm.

Severity and exploitation

How the CVSS severity of AMI MegaRAC_SPx's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High14

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of AMI MegaRAC_SPx's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No AMI MegaRAC_SPx CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every AMI MegaRAC_SPx version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.0 <= v < 12.79 CVEs
13.0 <= v < 13.59 CVEs
13 <= v < 13.68 CVEs
12 <= v < 12.76 CVEs
12 <= v <= 12.72 CVEs
12.0 <= v < 12.22 CVEs
12 <= v < 12.21 CVE
12.0 <= v < 12.31 CVE
12.0 <= v <= 12.61 CVE
12.0 <= v <= 12.71 CVE
13.0 <= v <= 13.41 CVE

Fixed in

12.715 CVEs
13.59 CVEs
13.68 CVEs
12.23 CVEs
12.31 CVE

Find a version

22 CVEs

Sort

heap memory overflow
CVE-2023-37297
Patch
CWE-122
High · CVSS 8.8
EPSS 0.3% (16th pct)2024-01-09
Stack-based Buffer Overflow
CVE-2023-37296
Patch
CWE-121
High · CVSS 8.8
EPSS 0.3% (16th pct)2024-01-09
High vulnerability · 2024-01-09
CVE-2023-37295
Patch
CWE-122
High · CVSS 8.8
EPSS 0.3% (16th pct)2024-01-09
Heap-based Buffer Overflow
CVE-2023-37294
Patch
CWE-122
High · CVSS 8.8
EPSS 0.3% (16th pct)2024-01-09
Critical vulnerability · 2024-01-09
CVE-2023-37293
Patch
CWE-121
Critical · CVSS 9.6
EPSS 0.3% (22th pct)2024-01-09
Untrusted Pointer Dereference
CVE-2023-34333
Patch
CWE-822
High · CVSS 7.8
EPSS 0.2% (7th pct)2024-01-09
Critical vulnerability · 2024-01-09
CVE-2023-3043
Patch
CWE-121
Critical · CVSS 9.6
EPSS 0.3% (22th pct)2024-01-09
Untrusted Pointer Dereference in BMC
CVE-2023-34332
Patch
CWE-822
High · CVSS 7.8
EPSS 0.2% (7th pct)2024-01-09
High vulnerability · 2023-07-05
CVE-2023-34473
Patch
CWE-798
High · CVSS 8.8
EPSS 0.5% (39th pct)2023-07-05
Medium vulnerability · 2023-07-05
CVE-2023-34472
Patch
CWE-113
Medium · CVSS 6.5
EPSS 0.5% (40th pct)2023-07-05
High vulnerability · 2023-07-05
CVE-2023-34471
Patch
CWE-325
High · CVSS 8.1
EPSS 0.3% (22th pct)2023-07-05
hard coded cryptographic key
CVE-2023-34338
Patch
CWE-321
Critical · CVSS 9.8
EPSS 0.3% (20th pct)2023-07-05
High vulnerability · 2023-07-05
CVE-2023-34337
Patch
CWE-326
High · CVSS 8.8
EPSS 0.2% (9th pct)2023-07-05
High vulnerability · 2023-06-12
CVE-2023-34336
Patch
CWE-120
High · CVSS 8.8
EPSS 0.7% (51th pct)2023-06-12
Critical vulnerability · 2023-06-12
CVE-2023-34335
Patch
CWE-288
Critical · CVSS 9.1
EPSS 0.4% (32th pct)2023-06-12
High vulnerability · 2023-06-12
CVE-2023-34334
Patch
CWE-78
High · CVSS 8.8
EPSS 0.8% (57th pct)2023-06-12
High vulnerability · 2023-06-12
CVE-2023-34343
Patch
CWE-78
High · CVSS 8.8
EPSS 0.8% (57th pct)2023-06-12
Critical vulnerability · 2023-06-12
CVE-2023-34342
Patch
CWE-22
Critical · CVSS 9.1
EPSS 0.5% (44th pct)2023-06-12
High vulnerability · 2023-06-12
CVE-2023-34341
Patch
CWE-119
High · CVSS 8.8
EPSS 0.8% (55th pct)2023-06-12
Medium vulnerability · 2023-06-12
CVE-2023-34345
Patch
CWE-22
Medium · CVSS 6.5
EPSS 0.7% (53th pct)2023-06-12
Medium vulnerability · 2023-06-12
CVE-2023-34344
Patch
CWE-203
Medium · CVSS 5.3
EPSS 0.4% (38th pct)2023-06-12
High vulnerability · 2023-01-30
CVE-2022-26872
Patch
CWE-640
High · CVSS 8.8
EPSS 0.8% (55th pct)2023-01-30

Common weakness types

The CWE weakness categories most often found in AMI MegaRAC_SPx CVEs. Follow any weakness for its full explanation.

CWE-122Heap-based Buffer Overflow3 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-822Untrusted Pointer Dereference2 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVE
CWE-325Missing Cryptographic Step1 CVE
CWE-326Inadequate Encryption Strength1 CVE

Disclosure activity by year

How many AMI MegaRAC_SPx CVEs were published each year.

2023

14

2024

8

Other AMI products

Browse vulnerabilities for other products by AMI.

AptioV32 CVEs aptio v30 CVEs megarac sp-x30 CVEs Aptio5 CVEs MegaRAC SPx125 CVEs MegaRAC SPx134 CVEs MegaRAC SPx-122 CVEs MegaRAC SPx-132 CVEs

All AMI vulnerabilities

Frequently asked questions

Common questions about AMI MegaRAC_SPx vulnerabilities.

How many CVEs does AMI MegaRAC_SPx have?: AMI MegaRAC_SPx has 22 published CVE records since 2023.
How many AMI MegaRAC_SPx CVEs are in CISA KEV?: None of AMI MegaRAC_SPx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for AMI MegaRAC_SPx vulnerabilities?: No AMI MegaRAC_SPx CVEs currently have a tracked public exploit in this dataset.
Which versions of AMI MegaRAC_SPx are affected?: 16 distinct AMI MegaRAC_SPx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in AMI MegaRAC_SPx CVEs?: AMI MegaRAC_SPx's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-121 (Stack-based Buffer Overflow), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical AMI MegaRAC_SPx vulnerabilities are there?: AMI MegaRAC_SPx has 5 critical and 14 high-severity CVEs.
What is the average severity of AMI MegaRAC_SPx CVEs?: The average CVSS base score across AMI MegaRAC_SPx's scored CVEs is 8.4.

References

All AMI vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track AMI MegaRAC_SPx vulnerabilities

Get an alert for each new AMI MegaRAC_SPx CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References