QID 378683

AMI firmware leaked in the 2021 Ransomware attack can be exploited by any local or remote attacker with access to an industry-standard remote-management interface known as Redfish to execute malicious code that will run on every server inside a data center. There is NO patch available for these vulnerabilities. QID Detection Logic:

Until the vulnerabilities are patched using an update AMI malicious hackers gain superuser status inside some of the most sensitive cloud environments in the world. Successful attackers could perform unauthenticated remote code execution and unauthorized device access with superuser permissions.