Actively exploited vulnerability in CVE-2024-54085 in AMI MegaRAC gives attackers extraordinary control over server fleets by allowing a remote attacker to create an admin account without any authentication:
👇
https://arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/
Sam Stepanyan :verified: 🐘
npub1gr…9gp67
2025-06-27 07:21:25 UTC
Author Public Key
npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67Seen on
wss://relay.momostr.pinkPublished at
2025-06-27 07:21:25 UTCEvent JSON
{
"id": "898f2bfad69da7a4647a8a95150cb989b6e6e7c43d24a1c71cab68e0539d9a3a",
"pubkey": "40ce97e15dfaa233b82c533cc5aa7d8e91134c227e838c82e32437f41d1db924",
"created_at": 1751008885,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@securestep9/114754118322827535",
"web"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/114754118322827535",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/securestep9/statuses/114754118322827535",
"pink.momostr"
],
[
"-"
]
],
"content": "Actively exploited vulnerability in CVE-2024-54085 in AMI MegaRAC gives attackers extraordinary control over server fleets by allowing a remote attacker to create an admin account without any authentication:\n👇\nhttps://arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/",
"sig": "ab9819f6ea937c936da7c135897aadd23086d3e701613a471024524c5d43067f583f6301782c07ad312188af10c0367515711a24934e3b1667abade71da7b83e"
}