Weak password hashes for Redfish & API
CVE-2022-40258

5.3MEDIUM

Key Information:

Vendor

Ami

Status
Megarac Spx-12
Megarac Spx-13
Vendor
CVE Published:
31 January 2023

What is CVE-2022-40258?

AMI Megarac Weak password hashes for Redfish & API

Affected Version(s)

MegaRAC SPx-12 0

MegaRAC SPx-13 0

References

https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443...
https://security.netapp.com/advisory/ntap-20230731-0008/

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vlad Bakin from Eclypsium Research
.