CVE-2024-54085

The vulnerability classified as CWE-290 (Authentication Bypass by Spoofing) allows an attacker to bypass the authentication process in the Redfish interface — a standard API interface for managing server infrastructure. The attack is possible remotely, without possessing any credentials, without user interaction, and without special environmental configuration requirements. After successfully bypassing authentication, the attacker gains access to BMC functions that operate below the operating system level and are difficult to detect and remove.

Successful exploitation of the vulnerability can lead to complete loss of confidentiality, integrity, and availability of the system, including permanent damage (bricking) of the server through BMC firmware manipulation. An attacker can gain full control over hardware management, install malicious code at the firmware level, or completely disable the server.

Patches available from the manufacturer must be applied immediately in accordance with references — official AMI bulletin: https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf and NetApp advisory: https://security.netapp.com/advisory/ntap-20250328-0003/. Additionally, it is recommended to isolate BMC management interfaces from production networks and the public internet through dedicated OOBM (Out-of-Band Management) networks and restrict access to the Redfish interface exclusively to authorized hosts.

AMI MegaRAC SP-X (BMC firmware), NetApp H300S Firmware, NetApp H300S, NetApp H500S Firmware — specific versions indicated in manufacturer references (AMI-SA-2025003 and NetApp advisory ntap-20250328-0003)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.