[German]Brief warning or information for administrators who use AMI MegaRAC BMC. The company has already published a security warning on March 11, 2025. There is a critical vulnerability CVE-2024-54085 (CVSS v4 score of 10.0), which should allow a remote server takeover or even "bricking" a server.
I became aware of the issue with the vulnerability CVE-2024-54085 via the following tweet. The Hacker News has taken up the topic in this article. 
The BIOS/UEFI developer AMI warns of a vulnerability in the AMI MegaRAC BMC. The vulnerability in the AMI MegaRAC SPx firmware allows an attacker to bypass the authentication of the BMC remotely via the Redfish host interface. Successful exploitation of this vulnerability can lead to a loss of confidentiality, integrity and/or availability. Eclypsium has published more details in this article and names affected devices.
