AMI MegaRAC: Default credentials for the `sysadmin` account, shell access to the BMC

CVE-2022-40242Firmware, BMC & network fabriccurated

Impact

Default credentials for the sysadmin account, shell access to the BMC

Who can reach it

Network / SSH to BMC

What to do

Same intake-time credential rotation; add a fleet scan asserting no default BMC accounts remain

References

https://nvd.nist.gov/vuln/detail/CVE-2022-40242

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.