PT-2023-19972
CVE-2023-25192
·
Published
2023-02-15
·
Updated
2025-03-19
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
AMI MegaRAC SPX versions prior to SPx12-update-7.00
AMI MegaRAC SPX versions prior to SPx13-update-5.00
Description
The issue allows user enumeration through Redfish.
Recommendations
For versions prior to SPx12-update-7.00, update to SPx12-update-7.00 to resolve the issue.
For versions prior to SPx13-update-5.00, update to SPx13-update-5.00 to resolve the issue.
As a temporary workaround, consider restricting access to Redfish until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾