CVE-2024–54085 in AMI MegaRAC BMC allows remote control, malware deployment, and server damage; patches released March 11, 2025.