CVE-2022-40259

CVE-2022-40259 is a critical default credentials vulnerability affecting AMI MegaRAC SP-X firmware, widely used in server baseboard management controllers (BMCs) from various vendors. With a CVSS score of 9.8, it allows unauthenticated remote attackers to achieve full compromise of affected systems, leading to complete loss of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage due to its widespread impact on data centers and cloud infrastructure. Its low EPSS score suggests a lower likelihood of exploitation compared to many other CVEs, but its high FAUCET Risk Score underscores the severe potential consequences if exploited.