CVE Program partner

AMI

AMI

API
CVEs, 365 days757 all time, 1 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAMI
RoleCNA
TypeVendor, Open Source, Researcher
Reports toicscert → CISA
ScopeVulnerabilities in AMI firmware and software products, as well as vulnerabilities discovered by AMI that are not covered by another CNA scope.
Advisorieshttps://www.ami.com/security-center/

Latest CVEs · RSS

  • CVE-2026-0893 2026-10-13 · CVSS 5.8
    AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful
  • CVE-2025-58774 2026-10-13 · CVSS 8.3
    AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this v
  • CVE-2025-58773 2026-10-13 · CVSS 7.1
    AMI APTIOV contains vulnerabilities in BIOS where users may cause  "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could le
  • CVE-2025-58772 2026-10-13 · CVSS 8.2
    AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability coul
  • CVE-2025-58771 2026-10-13 · CVSS 7.1
    AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerabilit
  • CVE-2026-33197 2026-09-08 · CVSS 8.7
    AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitatio
  • CVE-2025-58770 2025-12-12 · CVSS 7.2
    APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploit
  • CVE-2025-33044 2025-10-14 · CVSS 5.8
    APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. S
  • CVE-2025-22833 2025-10-14 · CVSS 4.6
    APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of
  • CVE-2025-22832 2025-10-14 · CVSS 5.8
    APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to d
  • CVE-2025-22831 2025-10-14 · CVSS 5.8
    APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to d
  • CVE-2025-33045 2025-09-09 · CVSS 8.2
    APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthor
  • CVE-2025-22830 2025-08-12 · CVSS 7.3
    APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lea
  • CVE-2025-22834 2025-08-12 · CVSS 4.2
    AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability m
  • CVE-2025-33043 2025-05-29 · CVSS 5.8
    APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can pote
  • CVE-2024-42446 2025-05-13 · CVSS 7.5
    APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation
  • CVE-2024-54084 2025-03-11 · CVSS 7.5
    APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation
  • CVE-2024-54085 2025-03-11 · CVSS 10.0
    AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation
  • CVE-2024-33659 2025-02-11 · CVSS 5.7
    AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulne
  • CVE-2024-42444 2025-01-14 · CVSS 7.5
    APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may le
  • CVE-2024-2315 2024-11-12 · CVSS 6.8
    APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to u
  • CVE-2024-33658 2024-11-12 · CVSS 4.4
    APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Success
  • CVE-2024-33660 2024-11-12 · CVSS 5.2
    An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.
  • CVE-2024-42442 2024-11-12 · CVSS 7.2
    APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over t
  • CVE-2024-33657 2024-08-21 · CVSS 7.8
    This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRA

All CVE Program partners