{"id":"CVE-2019-16649","aliases":["EUVD-2019-7215","GHSA-w4w7-g55h-mxxx"],"status":"published","title":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and...","description":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00927,"percentile":0.60756,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-326","CWE-522"],"published":"2019-09-21T01:54:55Z","modified":"2026-06-17T02:22:29Z","products":[{"vendor":"supermicro","product":"a1sa2-2750f_firmware"},{"vendor":"supermicro","product":"a1sai-2550f_firmware"},{"vendor":"supermicro","product":"a1sai-2750f_firmware"},{"vendor":"supermicro","product":"a1sam-2550f_firmware"},{"vendor":"supermicro","product":"a1sam-2750f_firmware"},{"vendor":"supermicro","product":"a1sri-2358f_firmware"},{"vendor":"supermicro","product":"a1sri-2558f_firmware"},{"vendor":"supermicro","product":"a1sri-2758f_firmware"},{"vendor":"supermicro","product":"a1srm-2558f_firmware"},{"vendor":"supermicro","product":"a1srm-2758f_firmware"},{"vendor":"supermicro","product":"a1srm-ln5f-2358_firmware"},{"vendor":"supermicro","product":"a1srm-ln7f-2358_firmware"},{"vendor":"supermicro","product":"a1srm-ln7f-2758_firmware"},{"vendor":"supermicro","product":"b10drc-n_firmware"},{"vendor":"supermicro","product":"b10drc_firmware"},{"vendor":"supermicro","product":"b10drg-ibf2_firmware"},{"vendor":"supermicro","product":"b10drg-ibf_firmware"},{"vendor":"supermicro","product":"b10drg-tp_firmware"},{"vendor":"supermicro","product":"b10dri-n_firmware"},{"vendor":"supermicro","product":"b10dri_firmware"},{"vendor":"supermicro","product":"b10drt-ibf2_firmware"},{"vendor":"supermicro","product":"b10drt-ibf_firmware"},{"vendor":"supermicro","product":"b10drt-tp_firmware"},{"vendor":"supermicro","product":"b10drt_firmware"},{"vendor":"supermicro","product":"b11dpe_firmware"},{"vendor":"supermicro","product":"b11dpt_firmware"},{"vendor":"supermicro","product":"b11qpi_firmware"},{"vendor":"supermicro","product":"b11spe-cpu-25g_firmware"},{"vendor":"supermicro","product":"b11spe-cpu-tf_firmware"},{"vendor":"supermicro","product":"b1sd1-16c-tf_firmware"},{"vendor":"supermicro","product":"b1sd1-tf_firmware"},{"vendor":"supermicro","product":"b1sd2-16c-tf_firmware"},{"vendor":"supermicro","product":"b1sd2-tf_firmware"},{"vendor":"supermicro","product":"b2ss1-cf_firmware"},{"vendor":"supermicro","product":"b2ss1-cpu_firmware"},{"vendor":"supermicro","product":"b2ss1-f_firmware"},{"vendor":"supermicro","product":"b2ss1-h-mtf_firmware"},{"vendor":"supermicro","product":"b2ss1-mtf_firmware"},{"vendor":"supermicro","product":"b2ss2-f_firmware"},{"vendor":"supermicro","product":"b2ss2-h-mtf_firmware"},{"vendor":"supermicro","product":"b2ss2-mtf_firmware"},{"vendor":"supermicro","product":"b9dr7_firmware"},{"vendor":"supermicro","product":"b9drg-3m_firmware"},{"vendor":"supermicro","product":"b9drg-e_firmware"},{"vendor":"supermicro","product":"b9drg_firmware"},{"vendor":"supermicro","product":"b9dri_firmware"},{"vendor":"supermicro","product":"b9drp_firmware"},{"vendor":"supermicro","product":"b9drt_firmware"},{"vendor":"supermicro","product":"b9qr7\\(-tp\\)_firmware"},{"vendor":"supermicro","product":"m11sdv-4c-ln4f_firmware"},{"vendor":"supermicro","product":"m11sdv-4ct-ln4f_firmware"},{"vendor":"supermicro","product":"m11sdv-8c-ln4f_firmware"},{"vendor":"supermicro","product":"m11sdv-8c\\+-ln4f_firmware"},{"vendor":"supermicro","product":"m11sdv-8ct-ln4f_firmware"},{"vendor":"supermicro","product":"x10dbt-t_firmware"},{"vendor":"supermicro","product":"x10ddw-i_firmware"},{"vendor":"supermicro","product":"x10ddw-in_firmware"},{"vendor":"supermicro","product":"x10dgo-t_firmware"},{"vendor":"supermicro","product":"x10dgq_firmware"},{"vendor":"supermicro","product":"x10drc-ln4\\+_firmware"},{"vendor":"supermicro","product":"x10drc-t4\\+_firmware"},{"vendor":"supermicro","product":"x10drd-i_firmware"},{"vendor":"supermicro","product":"x10drd-int_firmware"},{"vendor":"supermicro","product":"x10drd-intp_firmware"},{"vendor":"supermicro","product":"x10drd-it_firmware"},{"vendor":"supermicro","product":"x10drd-itp_firmware"},{"vendor":"supermicro","product":"x10drd-l_firmware"},{"vendor":"supermicro","product":"x10drd-lt_firmware"},{"vendor":"supermicro","product":"x10drd-ltp_firmware"},{"vendor":"supermicro","product":"x10drff-c_firmware"},{"vendor":"supermicro","product":"x10drff-cg_firmware"},{"vendor":"supermicro","product":"x10drff-ctg_firmware"},{"vendor":"supermicro","product":"x10drff-ig_firmware"},{"vendor":"supermicro","product":"x10drff-itg_firmware"},{"vendor":"supermicro","product":"x10drff_firmware"},{"vendor":"supermicro","product":"x10drfr-n_firmware"},{"vendor":"supermicro","product":"x10drfr-nt_firmware"},{"vendor":"supermicro","product":"x10drfr-t_firmware"},{"vendor":"supermicro","product":"x10drfr_firmware"},{"vendor":"supermicro","product":"x10drg-h_firmware"},{"vendor":"supermicro","product":"x10drg-ht_firmware"},{"vendor":"supermicro","product":"x10drg-o\\+-cpu_firmware"},{"vendor":"supermicro","product":"x10drg-ot\\+-cpu_firmware"},{"vendor":"supermicro","product":"x10drg-q_firmware"},{"vendor":"supermicro","product":"x10drh-c_firmware"},{"vendor":"supermicro","product":"x10drh-cln4_firmware"},{"vendor":"supermicro","product":"x10drh-ct_firmware"},{"vendor":"supermicro","product":"x10drh-i_firmware"},{"vendor":"supermicro","product":"x10drh-iln4_firmware"},{"vendor":"supermicro","product":"x10drh-it_firmware"},{"vendor":"supermicro","product":"x10dri-ln4\\+_firmware"},{"vendor":"supermicro","product":"x10dri-t4\\+_firmware"},{"vendor":"supermicro","product":"x10dri-t_firmware"},{"vendor":"supermicro","product":"x10dri_firmware"},{"vendor":"supermicro","product":"x10drl-c_firmware"},{"vendor":"supermicro","product":"x10drl-ct_firmware"},{"vendor":"supermicro","product":"x10drl-i_firmware"},{"vendor":"supermicro","product":"x10drl-it_firmware"},{"vendor":"supermicro","product":"x10drl-ln4_firmware"},{"vendor":"supermicro","product":"x10drs_firmware"},{"vendor":"supermicro","product":"x10drt-b\\+_firmware"},{"vendor":"supermicro","product":"x10drt-h_firmware"},{"vendor":"supermicro","product":"x10drt-hibf_firmware"},{"vendor":"supermicro","product":"x10drt-l_firmware"},{"vendor":"supermicro","product":"x10drt-libf_firmware"},{"vendor":"supermicro","product":"x10drt-libq_firmware"},{"vendor":"supermicro","product":"x10drt-p_firmware"},{"vendor":"supermicro","product":"x10drt-pibf_firmware"},{"vendor":"supermicro","product":"x10drt-pibq_firmware"},{"vendor":"supermicro","product":"x10drt-ps_firmware"},{"vendor":"supermicro","product":"x10drt-pt_firmware"},{"vendor":"supermicro","product":"x10dru-i\\+_firmware"},{"vendor":"supermicro","product":"x10dru-x_firmware"},{"vendor":"supermicro","product":"x10dru-xll_firmware"},{"vendor":"supermicro","product":"x10drw-e_firmware"},{"vendor":"supermicro","product":"x10drw-et_firmware"},{"vendor":"supermicro","product":"x10drw-i_firmware"},{"vendor":"supermicro","product":"x10drw-it_firmware"},{"vendor":"supermicro","product":"x10drw-n_firmware"},{"vendor":"supermicro","product":"x10drw-nt_firmware"},{"vendor":"supermicro","product":"x10drx_firmware"},{"vendor":"supermicro","product":"x10dsc\\+_firmware"},{"vendor":"supermicro","product":"x10dsn-ts_firmware"},{"vendor":"supermicro","product":"x10obi-cpu_firmware"},{"vendor":"supermicro","product":"x10qbi_firmware"},{"vendor":"supermicro","product":"x10qbl-4_firmware"},{"vendor":"supermicro","product":"x10qbl-4ct_firmware"},{"vendor":"supermicro","product":"x10qbl-ct_firmware"},{"vendor":"supermicro","product":"x10qbl_firmware"},{"vendor":"supermicro","product":"x10qrh\\+_firmware"},{"vendor":"supermicro","product":"x10sae_firmware"},{"vendor":"supermicro","product":"x10sat_firmware"},{"vendor":"supermicro","product":"x10sdd-16c-f_firmware"},{"vendor":"supermicro","product":"x10sdd-f_firmware"},{"vendor":"supermicro","product":"x10sde-df_firmware"},{"vendor":"supermicro","product":"x10sdv-12c-tln4f\\+_firmware"},{"vendor":"supermicro","product":"x10sdv-12c-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-12c\\+-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-16c-tln4f\\+_firmware"},{"vendor":"supermicro","product":"x10sdv-16c-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-16c\\+-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-2c-7tp4f_firmware"},{"vendor":"supermicro","product":"x10sdv-2c-tln2f_firmware"},{"vendor":"supermicro","product":"x10sdv-2c-tp4f_firmware"},{"vendor":"supermicro","product":"x10sdv-2c-tp8f_firmware"},{"vendor":"supermicro","product":"x10sdv-4c-7tp4f_firmware"},{"vendor":"supermicro","product":"x10sdv-4c-tln2f_firmware"},{"vendor":"supermicro","product":"x10sdv-4c-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-4c\\+-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-4c\\+-tp4f_firmware"},{"vendor":"supermicro","product":"x10sdv-6c-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-6c\\+-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-7tp4f_firmware"},{"vendor":"supermicro","product":"x10sdv-7tp8f_firmware"},{"vendor":"supermicro","product":"x10sdv-8c-tln4f\\+_firmware"},{"vendor":"supermicro","product":"x10sdv-8c-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-8c\\+-ln2f_firmware"},{"vendor":"supermicro","product":"x10sdv-f_firmware"},{"vendor":"supermicro","product":"x10sdv-tln4f_firmware"},{"vendor":"supermicro","product":"x10sdv-tp8f_firmware"},{"vendor":"supermicro","product":"x10sl7-f_firmware"},{"vendor":"supermicro","product":"x10sla-f_firmware"},{"vendor":"supermicro","product":"x10sld-f_firmware"},{"vendor":"supermicro","product":"x10sld-hf_firmware"},{"vendor":"supermicro","product":"x10sle-df_firmware"},{"vendor":"supermicro","product":"x10sle-f_firmware"},{"vendor":"supermicro","product":"x10sle-hf_firmware"},{"vendor":"supermicro","product":"x10slh-f_firmware"},{"vendor":"supermicro","product":"x10sll-f_firmware"},{"vendor":"supermicro","product":"x10sll-s_firmware"},{"vendor":"supermicro","product":"x10sll-sf_firmware"},{"vendor":"supermicro","product":"x10sll\\+-f_firmware"},{"vendor":"supermicro","product":"x10slm-f_firmware"},{"vendor":"supermicro","product":"x10slm\\+-f_firmware"},{"vendor":"supermicro","product":"x10slm\\+-ln4f_firmware"},{"vendor":"supermicro","product":"x10slx-f_firmware"},{"vendor":"supermicro","product":"x10sra-f_firmware"},{"vendor":"supermicro","product":"x10sra_firmware"},{"vendor":"supermicro","product":"x10srd-f_firmware"},{"vendor":"supermicro","product":"x10srg-f_firmware"},{"vendor":"supermicro","product":"x10srh-cf_firmware"},{"vendor":"supermicro","product":"x10srh-cln4f_firmware"},{"vendor":"supermicro","product":"x10sri-f_firmware"},{"vendor":"supermicro","product":"x10srl-f_firmware"},{"vendor":"supermicro","product":"x10srm-f_firmware"},{"vendor":"supermicro","product":"x10srm-tf_firmware"},{"vendor":"supermicro","product":"x10srw-f_firmware"},{"vendor":"supermicro","product":"x11dac_firmware"},{"vendor":"supermicro","product":"x11dai-n_firmware"},{"vendor":"supermicro","product":"x11ddw-l_firmware"},{"vendor":"supermicro","product":"x11ddw-nt_firmware"},{"vendor":"supermicro","product":"x11dgo-t_firmware"},{"vendor":"supermicro","product":"x11dgq_firmware"},{"vendor":"supermicro","product":"x11dpff-sn_firmware"},{"vendor":"supermicro","product":"x11dpfr-s_firmware"},{"vendor":"supermicro","product":"x11dpfr-sn_firmware"},{"vendor":"supermicro","product":"x11dpg-ot-cpu_firmware"},{"vendor":"supermicro","product":"x11dpg-qt_firmware"},{"vendor":"supermicro","product":"x11dpg-sn_firmware"},{"vendor":"supermicro","product":"x11dph-i_firmware"},{"vendor":"supermicro","product":"x11dph-t_firmware"},{"vendor":"supermicro","product":"x11dph-tq_firmware"},{"vendor":"supermicro","product":"x11dpi-n_firmware"},{"vendor":"supermicro","product":"x11dpi-nt_firmware"},{"vendor":"supermicro","product":"x11dpl-i_firmware"},{"vendor":"supermicro","product":"x11dps-re_firmware"},{"vendor":"supermicro","product":"x11dpt-b_firmware"},{"vendor":"supermicro","product":"x11dpt-bh_firmware"},{"vendor":"supermicro","product":"x11dpt-l_firmware"},{"vendor":"supermicro","product":"x11dpt-ps_firmware"},{"vendor":"supermicro","product":"x11dpu-v_firmware"},{"vendor":"supermicro","product":"x11dpu-x_firmware"},{"vendor":"supermicro","product":"x11dpu-xll_firmware"},{"vendor":"supermicro","product":"x11dpu-z\\+_firmware"},{"vendor":"supermicro","product":"x11dpu-ze\\+_firmware"},{"vendor":"supermicro","product":"x11dpu_firmware"},{"vendor":"supermicro","product":"x11dpx-t_firmware"},{"vendor":"supermicro","product":"x11dsc\\+_firmware"},{"vendor":"supermicro","product":"x11dsf-e_firmware"},{"vendor":"supermicro","product":"x11dsn-ts_firmware"},{"vendor":"supermicro","product":"x11dsn-tsq_firmware"},{"vendor":"supermicro","product":"x11opi-cpu_firmware"},{"vendor":"supermicro","product":"x11qph\\+_firmware"},{"vendor":"supermicro","product":"x11sca-f_firmware"},{"vendor":"supermicro","product":"x11sca-w_firmware"},{"vendor":"supermicro","product":"x11sca_firmware"},{"vendor":"supermicro","product":"x11scd-f_firmware"},{"vendor":"supermicro","product":"x11sch-f_firmware"},{"vendor":"supermicro","product":"x11sch-ln4f_firmware"},{"vendor":"supermicro","product":"x11scl-f_firmware"},{"vendor":"supermicro","product":"x11scl-if_firmware"},{"vendor":"supermicro","product":"x11scl-ln4f_firmware"},{"vendor":"supermicro","product":"x11scm-f_firmware"},{"vendor":"supermicro","product":"x11scm-ln8f_firmware"},{"vendor":"supermicro","product":"x11scw-f_firmware"},{"vendor":"supermicro","product":"x11sdd-18c-f_firmware"},{"vendor":"supermicro","product":"x11sdd-8c-f_firmware"},{"vendor":"supermicro","product":"x11sds-12c_firmware"},{"vendor":"supermicro","product":"x11sds-16c_firmware"},{"vendor":"supermicro","product":"x11sds-8c_firmware"},{"vendor":"supermicro","product":"x11spa-t_firmware"},{"vendor":"supermicro","product":"x11spa-tf_firmware"},{"vendor":"supermicro","product":"x11spg-tf_firmware"},{"vendor":"supermicro","product":"x11sph-nctf_firmware"},{"vendor":"supermicro","product":"x11sph-nctpf_firmware"},{"vendor":"supermicro","product":"x11spi-tf_firmware"},{"vendor":"supermicro","product":"x11spl-f_firmware"},{"vendor":"supermicro","product":"x11spm-f_firmware"},{"vendor":"supermicro","product":"x11spm-tf_firmware"},{"vendor":"supermicro","product":"x11spm-tpf_firmware"},{"vendor":"supermicro","product":"x11spw-ctf_firmware"},{"vendor":"supermicro","product":"x11spw-tf_firmware"},{"vendor":"supermicro","product":"x11sri-if_firmware"},{"vendor":"supermicro","product":"x11srl-f_firmware"},{"vendor":"supermicro","product":"x11srm-f_firmware"},{"vendor":"supermicro","product":"x11srm-vf_firmware"},{"vendor":"supermicro","product":"x11ssd-f_firmware"},{"vendor":"supermicro","product":"x11sse-f_firmware"},{"vendor":"supermicro","product":"x11ssh-ctf_firmware"},{"vendor":"supermicro","product":"x11ssh-f_firmware"},{"vendor":"supermicro","product":"x11ssh-gf-1585_firmware"},{"vendor":"supermicro","product":"x11ssh-gf-1585l_firmware"},{"vendor":"supermicro","product":"x11ssh-gtf-1585_firmware"},{"vendor":"supermicro","product":"x11ssh-gtf-1585l_firmware"},{"vendor":"supermicro","product":"x11ssh-ln4f_firmware"},{"vendor":"supermicro","product":"x11ssh-tf_firmware"},{"vendor":"supermicro","product":"x11ssi-ln4f_firmware"},{"vendor":"supermicro","product":"x11ssl-cf_firmware"},{"vendor":"supermicro","product":"x11ssl-f_firmware"},{"vendor":"supermicro","product":"x11ssl-nf_firmware"},{"vendor":"supermicro","product":"x11ssl_firmware"},{"vendor":"supermicro","product":"x11ssm-f_firmware"},{"vendor":"supermicro","product":"x11ssm_firmware"},{"vendor":"supermicro","product":"x11ssw-4tf_firmware"},{"vendor":"supermicro","product":"x11ssw-f_firmware"},{"vendor":"supermicro","product":"x11ssw-tf_firmware"},{"vendor":"supermicro","product":"x9da7\\/e_firmware"},{"vendor":"supermicro","product":"x9dai_firmware"},{"vendor":"supermicro","product":"x9dal-3\\/i_firmware"},{"vendor":"supermicro","product":"x9dax-7\\/i\\(t\\)f_firmware"},{"vendor":"supermicro","product":"x9dax-7\\/if-hft_firmware"},{"vendor":"supermicro","product":"x9db3\\/i-\\(tp\\)f_firmware"},{"vendor":"supermicro","product":"x9dbl-3\\/i\\(f\\)_firmware"},{"vendor":"supermicro","product":"x9dbs-f\\(-2u\\)_firmware"},{"vendor":"supermicro","product":"x9dbu-3\\/if_firmware"},{"vendor":"supermicro","product":"x9dr3\\/i-f_firmware"},{"vendor":"supermicro","product":"x9dr3\\/i-ln4f\\+_firmware"},{"vendor":"supermicro","product":"x9dr7-jln4f_firmware"},{"vendor":"supermicro","product":"x9dr7\\/e-ln4f_firmware"},{"vendor":"supermicro","product":"x9dr7\\/e-tf\\+_firmware"},{"vendor":"supermicro","product":"x9drd-7ln4f_series_firmware"},{"vendor":"supermicro","product":"x9drd-c\\(n\\)t\\+_firmware"},{"vendor":"supermicro","product":"x9drd-ef_firmware"},{"vendor":"supermicro","product":"x9drd-it\\+_firmware"},{"vendor":"supermicro","product":"x9drd-l\\/if_firmware"},{"vendor":"supermicro","product":"x9drff-7\\/i\\(t\\)\\+_firmware"},{"vendor":"supermicro","product":"x9drff-7\\/i\\(t\\)g\\+_firmware"},{"vendor":"supermicro","product":"x9drff\\(-7\\)_firmware"},{"vendor":"supermicro","product":"x9drfr_firmware"},{"vendor":"supermicro","product":"x9drg-h\\(t\\)f\\+_firmware"},{"vendor":"supermicro","product":"x9drg-h\\(t\\)f\\+ii_firmware"},{"vendor":"supermicro","product":"x9drg-h\\(t\\)f_firmware"},{"vendor":"supermicro","product":"x9drg-o\\(t\\)f-cpu_firmware"},{"vendor":"supermicro","product":"x9drg-qf_firmware"},{"vendor":"supermicro","product":"x9drh-7\\/i\\(t\\)f_firmware"},{"vendor":"supermicro","product":"x9drh-if-nv_firmware"},{"vendor":"supermicro","product":"x9drl-3\\/if_firmware"},{"vendor":"supermicro","product":"x9drl-7\\/ef_firmware"},{"vendor":"supermicro","product":"x9drt-h_series_firmware"},{"vendor":"supermicro","product":"x9drt-hf\\+_firmware"},{"vendor":"supermicro","product":"x9drt-p_series_firmware"},{"vendor":"supermicro","product":"x9drt_series_firmware"},{"vendor":"supermicro","product":"x9drw-3\\/if_firmware"},{"vendor":"supermicro","product":"x9drw-3ln4f\\+\\/3tf\\+_firmware"},{"vendor":"supermicro","product":"x9drw-7\\/itpf\\+_firmware"},{"vendor":"supermicro","product":"x9drw-7\\/itpf_firmware"},{"vendor":"supermicro","product":"x9drw-c\\(t\\)f31_firmware"},{"vendor":"supermicro","product":"x9drx\\+-f_firmware"},{"vendor":"supermicro","product":"x9qr7-tf\\+_firmware"},{"vendor":"supermicro","product":"x9qr7-tf_firmware"},{"vendor":"supermicro","product":"x9qri-f\\+_firmware"},{"vendor":"supermicro","product":"x9qri-f_firmware"},{"vendor":"supermicro","product":"x9sae\\(-v\\)_firmware"},{"vendor":"supermicro","product":"x9sca\\(-f\\)_firmware"},{"vendor":"supermicro","product":"x9scd_series_firmware"},{"vendor":"supermicro","product":"x9sci-ln4\\(f\\)_firmware"},{"vendor":"supermicro","product":"x9scl\\(-f\\)_firmware"},{"vendor":"supermicro","product":"x9scl\\+-f_firmware"},{"vendor":"supermicro","product":"x9scm\\(-f\\)_firmware"},{"vendor":"supermicro","product":"x9sra_firmware"},{"vendor":"supermicro","product":"x9srd-f_firmware"},{"vendor":"supermicro","product":"x9sre\\/i_series_firmware"},{"vendor":"supermicro","product":"x9srg-f_firmware"},{"vendor":"supermicro","product":"x9srh-7\\(t\\)f_firmware"},{"vendor":"supermicro","product":"x9srl\\(-f\\)_firmware"},{"vendor":"supermicro","product":"x9srw-f_firmware"}],"references":[{"url":"https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://github.com/eclypsium/USBAnywhere","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.supermicro.com/support/security_BMC_virtual_media.cfm","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16649"},{"url":"https://github.com/advisories/GHSA-w4w7-g55h-mxxx"}],"sources":{"cve":[{"id":"CVE-2019-16649","description":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.","status":"published","published":"2019-09-21T01:54:55Z","modified":"2024-08-05T01:17:41.094Z","updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-7215","description":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.","status":"published","published":"2019-09-21T01:54:55Z","modified":"2024-08-05T01:17:41Z","updated_at":"2026-11-03T02:40:32.752495Z"}],"ghsa":[{"id":"GHSA-w4w7-g55h-mxxx","title":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and...","description":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.","status":"published","published":"2022-05-24T16:56:36Z","modified":"2023-01-28T05:07:05Z","updated_at":"2026-11-02T14:44:29.724528Z"}],"nvd":[{"id":"CVE-2019-16649","description":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.","status":"published","published":"2019-09-21T02:15:11.523Z","modified":"2026-06-17T02:22:29.393Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287","CWE-326","CWE-522"],"updated_at":"2026-11-02T14:05:28.126831Z"}]}}