CVE-2024-54085
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
60.7%
99.1th percentile
CISA KEV
Listed
Added 2025-06-25 · patch by 2025-07-16
Weakness / dates
—
Published — · modified —
Description
AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.