CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing
Attackers can bypass authentication via the Redfish Host Interface in AMI MegaRAC-SPx BMC firmware, compromising confidentiality, integrity, and availability.
- Exploited in the wild
- Since 25 Jun 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-54085?
CVE-2024-54085 is a critical authentication bypass vulnerability in Netapp H300s Firmware, published on 11 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
Weakness: CWE-290
Which versions are affected by CVE-2024-54085?
It affects 10 products.
Products include Ami Megarac Sp-X, Netapp H300s Firmware, Netapp H410c Firmware, Netapp H410s Firmware, Netapp H500s Firmware, Netapp H700s Firmware and 4 more.
How do I fix CVE-2024-54085?
No fix has been published for CVE-2024-54085 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 16 Jul 2025.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-54085 being exploited?
Yes. Attackers have exploited CVE-2024-54085 in the wild since at least 25 Jun 2025.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Netapp H300s Firmware
Sources
Also known as GHSA-vcgc-h73q-2m2p.