AMI and OpenBMC · the BMC layer
PWX for MegaRAC and OpenBMC
AMI MegaRAC SP-X and OpenBMC: the known vulnerabilities of its firmware, how to give a scanner read-only access, and the settings to check. Free, no account.
The BMC is one layer of PWX, which covers the stack from the tenant and its VMs to the host, BMC, CPU, GPU and TPU. See every layer
56 CVEs9 critical31 high1 exploited (KEV)
1. Known vulnerabilities
| CVE | Severity | Published | Summary |
|---|---|---|---|
| CVE-2026-18857 | low 3.4 | 2026-09-24 | IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware... |
| CVE-2026-16141 | high 8.1 | 2026-09-15 | OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor d... |
| CVE-2026-16140 | high 8.8 | 2026-09-15 | OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the original integr... |
| CVE-2026-74694 | unknown | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes the number of bytes to copy from the attacker-controlled n... |
| CVE-2026-18849 | medium 6.8 | 2026-08-19 | IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute a... |
| CVE-2026-8058 | medium 4.9 | 2026-07-28 | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it. |
| CVE-2026-7868 | high 8.8 | 2026-07-28 | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges. |
| CVE-2026-7254 | medium 5.3 | 2026-05-27 | IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users. |
| CVE-2024-21927 | medium 5 | 2025-09-23 | Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC t... |
| CVE-2024-54085 EXPLOITED | critical 10 | 2025-03-11 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidential... |
| CVE-2025-20097 | medium 5.3 | 2025-02-12 | Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via net... |
| CVE-2023-52916 | high 7.8 | 2024-09-06 | In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 1600x900 When capturing 1600x900, system could crash when system memory usage is tight. The way t... |
| CVE-2023-49144 | high 8.1 | 2024-08-14 | Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2023-35123 | medium 5.9 | 2024-08-14 | Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allow an authenticated user to potentially enable denial of service via network access. |
| CVE-2024-35124 | high 7.5 | 2024-08-13 | A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administr... |
| CVE-2024-41660 | critical 9.8 | 2024-07-31 | slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC ... |
| CVE-2024-31916 | high 7.5 | 2024-06-27 | IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026. |
| CVE-2023-32280 | medium 5.3 | 2024-02-14 | Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access. |
| CVE-2023-31189 | high 8.8 | 2024-02-14 | Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access. |
| CVE-2023-3043 | high 8.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confident... |
| CVE-2023-37297 | high 8.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integ... |
| CVE-2023-37296 | high 8.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, in... |
| CVE-2023-37295 | high 8.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, i... |
| CVE-2023-37294 | high 8.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality,... |
| CVE-2023-37293 | high 8.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, i... |
All 56 MegaRAC and OpenBMC CVEs
What a scan can and cannot say for AMI
AMI advisories name a fixed SPx build. The SPx version is not exposed over Redfish, so neither the Inspector nor the scanner can tell which SPx a given BMC runs: they list AMI CVEs as possible, never confirmed. Ask your server vendor which SPx your BMC firmware carries, and compare it with the advisory. OpenBMC firmware versions are matched when NVD gives a version range.
Source: NVD, NVD CVE API 2.0: cpe:2.3:o:ami:megarac_sp-x, cpe:2.3:o:ami:megarac_spx-12, cpe:2.3:o:ami:megarac_spx-13, cpe:2.3:a:ami:megarac_spx, cpe:2.3:a:openbmc-project:openbmc, keyword "MegaRAC", keyword "OpenBMC", refreshed 2026-10-29 09:17 UTC. EXPLOITED = listed in the CISA KEV catalog.
2. Give a scanner read-only access
- OpenBMC: the role
priv-useris read-only and maps to Redfish ReadOnly. Web interface: Security and access > User management. Redfish:POST /redfish/v1/AccountService/Accountswith{"UserName":"pwx-ro","Password":"<long random>","RoleId":"ReadOnly","Enabled":true}. - AMI MegaRAC SP-X: each server maker customises it and AMI publishes no public administration guide. Use the server maker's BMC manual; where it implements the Redfish standard roles, the same POST with
RoleIdReadOnly applies.
Sources: OpenBMC user management · bmcweb roles · DMTF Redfish DSP0266 (roles)
3. Settings that open the power path
OpenBMC has no firewall: disable every service you do not use through ManagerNetworkProtocol (IPMI, SSH and the rest), and keep the BMC on a management network. CVE-2024-54085 (MegaRAC SP-X, authentication bypass through the Redfish Host Interface) is in the CISA KEV catalog: check the Host Interface first.
Sources: OpenBMC network security considerations · AMI security advisories · bmcweb advisories
Standard Redfish checks
| Redfish property | Want | Why |
|---|---|---|
| NetworkProtocol IPMI.ProtocolEnabled | false | IPMI 2.0 RAKP leaks password hashes to anyone who can reach the port (CVE-2013-4786). |
| NetworkProtocol Telnet.ProtocolEnabled | false | Credentials and commands travel in clear text. |
| NetworkProtocol HTTP.ProtocolEnabled | false | The web and Redfish interface is reachable without TLS. |
| NetworkProtocol SNMP.EnableSNMPv1 / EnableSNMPv2c | false (SNMPv3 only) | No authentication beyond a clear-text community string. |
| AccountService AccountLockoutThreshold | greater than 0 | With 0, BMC passwords can be guessed without limit. |
| HostInterface AuthenticationModes | no AuthNone | AuthNone lets any process on the host drive the BMC, and through it the power path, without credentials. |
| HostInterface CredentialBootstrapping.Enabled | false | The host OS can mint its own BMC account at any time. |
| Accounts with RoleId Administrator | one break-glass account | Each administrator can rewrite the power path. |
The Redfish Inspector checks each of these for you.
Vendor security advisories: www.ami.com/security-advisories/. New CVEs also appear in PWX news.
4. Check it
- One BMC, in your browser: collect its Redfish answers and paste them into the Redfish Inspector.
- All of them, from one machine that reaches the BMC network:
Every request is a GET and is written to a log next to the result. Nothing is sent anywhere else.curl -fsSL https://get.bareket.ai/pgdiscover | sh pgdiscover up 10.0.7.0/24 --credentials pwx-ro.cred --insecure - See what continuous monitoring adds: the Stack sandbox.
Free e-mail alerts
Get an e-mail when a new CVE lands for what you run
Run it on your own fleet
PWX Discover is free: the scan reads your fleet and lists what to fix, on your machine. PWX Monitor keeps watching every layer, from the tenant to the power rail, with attack paths and alerts in your SIEM. PWX Protect acts on the BMC. Start with a pilot.