"AMI MegaRAC BMC didn't consume security fixes for the Remotely Exploitable Vulnerability from 2018 when maintainers of Lighttpd upstreamed it ... #Intel and #Lenovo use the AMI MegaRAC" (Heap out-of-bounds vulnerability)

https://www.binarly.io/blog/lighttpd-gains-new-life