AMI MegaRAC SPx Authentication Bypass Vulnerability in Redfish Host Interface

A vulnerability has been identified in AMI MegaRAC SPx versions 12.0 prior to 12.7 and 13.0 prior to 13.5, allowing remote authentication bypass through the Redfish Host Interface. This vulnerability affects the Baseboard Management Controller (BMC) in certain NetApp StorageGRID models. Successful exploitation could lead to unauthorized access and manipulation of sensitive information, potentially causing a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in unauthorized access to the BMC, allowing an attacker to bypass authentication and potentially manipulate sensitive information or disrupt services, causing a denial-of-service condition.