{"id":"CVE-2018-13787","aliases":["EUVD-2018-5725","GHSA-x8pf-7q32-5293"],"status":"published","title":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a...","description":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.","severity":{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00417,"percentile":0.36318,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-07-09T18:00:00Z","modified":"2026-06-17T01:40:09Z","products":[{"vendor":"supermicro","product":"a1sa_firmware"},{"vendor":"supermicro","product":"a1sai1_firmware"},{"vendor":"supermicro","product":"a1sai_firmware"},{"vendor":"supermicro","product":"a1sam_firmware"},{"vendor":"supermicro","product":"a1srm_firmware"},{"vendor":"supermicro","product":"a2san_firmware"},{"vendor":"supermicro","product":"a2sap_firmware"},{"vendor":"supermicro","product":"a2sav_firmware"},{"vendor":"supermicro","product":"b10drg_firmware"},{"vendor":"supermicro","product":"b10dri_firmware"},{"vendor":"supermicro","product":"b10drt_firmware"},{"vendor":"supermicro","product":"b1dri_firmware"},{"vendor":"supermicro","product":"b1sa4_firmware"},{"vendor":"supermicro","product":"b1sd2tf_firmware"},{"vendor":"supermicro","product":"c7b250_firmware"},{"vendor":"supermicro","product":"c7h270_firmware"},{"vendor":"supermicro","product":"c7q270_firmware"},{"vendor":"supermicro","product":"c7x99oc_firmware"},{"vendor":"supermicro","product":"c7z170_firmware"},{"vendor":"supermicro","product":"c7z170o_firmware"},{"vendor":"supermicro","product":"c7z170oce_firmware"},{"vendor":"supermicro","product":"c7z270c_firmware"},{"vendor":"supermicro","product":"c7z270cg_firmware"},{"vendor":"supermicro","product":"c7z270l_firmware"},{"vendor":"supermicro","product":"c7z270m_firmware"},{"vendor":"supermicro","product":"c7z270p_firmware"},{"vendor":"supermicro","product":"c7z370i_firmware"},{"vendor":"supermicro","product":"c7z370l_firmware"},{"vendor":"supermicro","product":"c7z87oc_firmware"},{"vendor":"supermicro","product":"c7z97mf_firmware"},{"vendor":"supermicro","product":"c7z97oc_firmware"},{"vendor":"supermicro","product":"c9x299_firmware"},{"vendor":"supermicro","product":"k1spes_firmware"},{"vendor":"supermicro","product":"k1spi_firmware"},{"vendor":"supermicro","product":"x10dai_firmware"},{"vendor":"supermicro","product":"x10dal_firmware"},{"vendor":"supermicro","product":"x10dali_firmware"},{"vendor":"supermicro","product":"x10dax_firmware"},{"vendor":"supermicro","product":"x10ddw3_firmware"},{"vendor":"supermicro","product":"x10ddw4_firmware"},{"vendor":"supermicro","product":"x10ddwi_firmware"},{"vendor":"supermicro","product":"x10ddwn_firmware"},{"vendor":"supermicro","product":"x10dgo_firmware"},{"vendor":"supermicro","product":"x10drc_firmware"},{"vendor":"supermicro","product":"x10drd_firmware"},{"vendor":"supermicro","product":"x10drdl_firmware"},{"vendor":"supermicro","product":"x10drff_firmware"},{"vendor":"supermicro","product":"x10drfg_firmware"},{"vendor":"supermicro","product":"x10drfr_firmware"},{"vendor":"supermicro","product":"x10drg_firmware"},{"vendor":"supermicro","product":"x10drgh_firmware"},{"vendor":"supermicro","product":"x10drgo_firmware"},{"vendor":"supermicro","product":"x10drh4_firmware"},{"vendor":"supermicro","product":"x10drh_firmware"},{"vendor":"supermicro","product":"x10dri1_firmware"},{"vendor":"supermicro","product":"x10drl_firmware"},{"vendor":"supermicro","product":"x10drlc_firmware"},{"vendor":"supermicro","product":"x10drln_firmware"},{"vendor":"supermicro","product":"x10drs_firmware"},{"vendor":"supermicro","product":"x10drt_firmware"},{"vendor":"supermicro","product":"x10drtb_firmware"},{"vendor":"supermicro","product":"x10drth_firmware"},{"vendor":"supermicro","product":"x10drtl_firmware"},{"vendor":"supermicro","product":"x10drtps_firmware"},{"vendor":"supermicro","product":"x10drts_firmware"},{"vendor":"supermicro","product":"x10dru_firmware"},{"vendor":"supermicro","product":"x10drul_firmware"},{"vendor":"supermicro","product":"x10drux_firmware"},{"vendor":"supermicro","product":"x10drw_firmware"},{"vendor":"supermicro","product":"x10drwn_firmware"},{"vendor":"supermicro","product":"x10drx_firmware"},{"vendor":"supermicro","product":"x10dsc_firmware"},{"vendor":"supermicro","product":"x10dscp_firmware"},{"vendor":"supermicro","product":"x10dsn_firmware"},{"vendor":"supermicro","product":"x10qrh_firmware"},{"vendor":"supermicro","product":"x10sba_firmware"},{"vendor":"supermicro","product":"x10sddf_firmware"},{"vendor":"supermicro","product":"x10sde_firmware"},{"vendor":"supermicro","product":"x10sdvf_firmware"},{"vendor":"supermicro","product":"x10sdvt_firmware"},{"vendor":"supermicro","product":"x10sra_firmware"},{"vendor":"supermicro","product":"x10srd_firmware"},{"vendor":"supermicro","product":"x10srg_firmware"},{"vendor":"supermicro","product":"x10srh_firmware"},{"vendor":"supermicro","product":"x10sri_firmware"},{"vendor":"supermicro","product":"x10srl_firmware"},{"vendor":"supermicro","product":"x10srm_firmware"},{"vendor":"supermicro","product":"x10srw_firmware"},{"vendor":"supermicro","product":"x11sae_firmware"},{"vendor":"supermicro","product":"x11sae_m_firmware"},{"vendor":"supermicro","product":"x11sat_firmware"},{"vendor":"supermicro","product":"x11sba_firmware"},{"vendor":"supermicro","product":"x11sra_firmware"},{"vendor":"supermicro","product":"x11srm_firmware"},{"vendor":"supermicro","product":"x11ssn_firmware"},{"vendor":"supermicro","product":"x11ssq_firmware"},{"vendor":"supermicro","product":"x11ssql_firmware"},{"vendor":"supermicro","product":"x11ssv_firmware"},{"vendor":"supermicro","product":"x11ssz_firmware"},{"vendor":"supermicro","product":"x8sia_firmware"},{"vendor":"supermicro","product":"x8sie_firmware"},{"vendor":"supermicro","product":"x8sil_firmware"},{"vendor":"supermicro","product":"x8sit_firmware"},{"vendor":"supermicro","product":"x8siu_firmware"},{"vendor":"supermicro","product":"x9dbl_firmware"},{"vendor":"supermicro","product":"x9drf_firmware"},{"vendor":"supermicro","product":"x9drffp_firmware"},{"vendor":"supermicro","product":"x9drgqf_firmware"},{"vendor":"supermicro","product":"x9drth_firmware"},{"vendor":"supermicro","product":"x9sae_firmware"}],"references":[{"url":"https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13787"},{"url":"https://github.com/advisories/GHSA-x8pf-7q32-5293"}],"sources":{"cve":[{"id":"CVE-2018-13787","description":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.","status":"published","published":"2018-07-09T18:00:00Z","modified":"2024-08-05T09:14:47.218Z","updated_at":"2026-11-02T14:35:07.01498Z"}],"euvd":[{"id":"EUVD-2018-5725","description":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.","status":"published","published":"2018-07-09T18:00:00Z","modified":"2024-08-05T09:14:47Z","updated_at":"2026-11-03T02:39:48.313733Z"}],"ghsa":[{"id":"GHSA-x8pf-7q32-5293","title":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a...","description":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.","status":"published","published":"2022-05-13T01:49:52Z","modified":"2023-02-02T05:01:52Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:51:17.485612Z"}],"nvd":[{"id":"CVE-2018-13787","description":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.","status":"published","published":"2018-07-09T18:29:00.56Z","modified":"2026-06-17T01:40:09.947Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:32.929986Z"}]}}