CVE-2018-13787
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a...
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
- Record
CVE-2018-13787- CVSS 3.0
- 6.7 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
- Record
CVE-2018-13787- Updated
- 2026-11-02
EUVDEUVD-2018-5725 No score
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
- Record
EUVD-2018-5725- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x8pf-7q32-5293
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a...
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
- Record
GHSA-x8pf-7q32-5293- CVSS 3.0
- 6.7 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- supermicro a1sa firmware
- supermicro a1sai1 firmware
- supermicro a1sai firmware
- supermicro a1sam firmware
- supermicro a1srm firmware
- supermicro a2san firmware
- supermicro a2sap firmware
- supermicro a2sav firmware
- supermicro b10drg firmware
- supermicro b10dri firmware
- supermicro b10drt firmware
- supermicro b1dri firmware
Show 98 moreShow less
- supermicro b1sa4 firmware
- supermicro b1sd2tf firmware
- supermicro c7b250 firmware
- supermicro c7h270 firmware
- supermicro c7q270 firmware
- supermicro c7x99oc firmware
- supermicro c7z170 firmware
- supermicro c7z170o firmware
- supermicro c7z170oce firmware
- supermicro c7z270c firmware
- supermicro c7z270cg firmware
- supermicro c7z270l firmware
- supermicro c7z270m firmware
- supermicro c7z270p firmware
- supermicro c7z370i firmware
- supermicro c7z370l firmware
- supermicro c7z87oc firmware
- supermicro c7z97mf firmware
- supermicro c7z97oc firmware
- supermicro c9x299 firmware
- supermicro k1spes firmware
- supermicro k1spi firmware
- supermicro x10dai firmware
- supermicro x10dal firmware
- supermicro x10dali firmware
- supermicro x10dax firmware
- supermicro x10ddw3 firmware
- supermicro x10ddw4 firmware
- supermicro x10ddwi firmware
- supermicro x10ddwn firmware
- supermicro x10dgo firmware
- supermicro x10drc firmware
- supermicro x10drd firmware
- supermicro x10drdl firmware
- supermicro x10drff firmware
- supermicro x10drfg firmware
- supermicro x10drfr firmware
- supermicro x10drg firmware
- supermicro x10drgh firmware
- supermicro x10drgo firmware
- supermicro x10drh4 firmware
- supermicro x10drh firmware
- supermicro x10dri1 firmware
- supermicro x10drl firmware
- supermicro x10drlc firmware
- supermicro x10drln firmware
- supermicro x10drs firmware
- supermicro x10drt firmware
- supermicro x10drtb firmware
- supermicro x10drth firmware
- supermicro x10drtl firmware
- supermicro x10drtps firmware
- supermicro x10drts firmware
- supermicro x10dru firmware
- supermicro x10drul firmware
- supermicro x10drux firmware
- supermicro x10drw firmware
- supermicro x10drwn firmware
- supermicro x10drx firmware
- supermicro x10dsc firmware
- supermicro x10dscp firmware
- supermicro x10dsn firmware
- supermicro x10qrh firmware
- supermicro x10sba firmware
- supermicro x10sddf firmware
- supermicro x10sde firmware
- supermicro x10sdvf firmware
- supermicro x10sdvt firmware
- supermicro x10sra firmware
- supermicro x10srd firmware
- supermicro x10srg firmware
- supermicro x10srh firmware
- supermicro x10sri firmware
- supermicro x10srl firmware
- supermicro x10srm firmware
- supermicro x10srw firmware
- supermicro x11sae firmware
- supermicro x11sae m firmware
- supermicro x11sat firmware
- supermicro x11sba firmware
- supermicro x11sra firmware
- supermicro x11srm firmware
- supermicro x11ssn firmware
- supermicro x11ssq firmware
- supermicro x11ssql firmware
- supermicro x11ssv firmware
- supermicro x11ssz firmware
- supermicro x8sia firmware
- supermicro x8sie firmware
- supermicro x8sil firmware
- supermicro x8sit firmware
- supermicro x8siu firmware
- supermicro x9dbl firmware
- supermicro x9drf firmware
- supermicro x9drffp firmware
- supermicro x9drgqf firmware
- supermicro x9drth firmware
- supermicro x9sae firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-13787 is a medium vulnerability (CVSS 6.7) in Supermicro A1sa Firmware, published July 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. No source names a fixed version.
References
blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems
bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products
supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10
nvd.nist.gov/vuln/detail/CVE-2018-13787
github.com/advisories/GHSA-x8pf-7q32-5293