Smci vulnerabilities

Products

• Mbd-x12spi 6
• Mbd-x12dpg-oa6 3
• Mbd-x13sedw-f 3
• X12spi 2
• X13sem-f 2

Newest

• smci mbd-x12spi Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability CVE-2026-65213 6.6 MediumOctober 27, 2026
• smci mbd-x12spi Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability CVE-2026-65211 7.2 HighOctober 27, 2026
• smci mbd-x12spi Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability CVE-2026-65210 4.9 MediumOctober 27, 2026
• smci mbd-x12spi Supermicro BMC IPMI feature contains a Privilege escalation vulnerability CVE-2026-65220 8.8 HighOctober 27, 2026
• smci mbd-x12spi Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability CVE-2026-65219 7.4 HighOctober 27, 2026
• smci mbd-x12spi Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token CVE-2026-18451 3.1 LowOctober 27, 2026
• smci x12spi Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability CVE-2026-18450 9.8 CriticalOctober 27, 2026
• smci x12spi Supermicro BMC contains a SMCRAKP Fixed Key vulnerability CVE-2026-18449 7.5 HighOctober 27, 2026
• smci mbd-x12stw-f Supermicro BMC's syslog feature contains a command injection vulnerability CVE-2026-16521 7.2 HighOctober 27, 2026
• smci x14dbg-dap,x14dbi Supermicro SMASH service contain an Arbitrary code execution issue CVE-2026-3821 8.8 HighJuly 22, 2026
• smci as-2115hs-tnr Supermicro BMC's SMTP service contains a command injection vulnerability CVE-2026-3820 7.2 HighJune 4, 2026
• smci x13sem-f Supermicro BMC firmware update validation bypass CVE-2025-12007 8.4 HighJanuary 16, 2026
• smci x12stw-f Supermicro BMC firmware update validation bypass CVE-2025-12006 7.2 HighJanuary 16, 2026
• smci x13sedw-f A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL). CVE-2025-8727 7.2 HighNovember 18, 2025
• smci mbd-x13sedw-f Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library CVE-2025-8404 5.5 MediumNovember 18, 2025
• smci mbd-x13sedw-f A stack buffer overflow vulnerability exists in the Supermicro BMC Web function CVE-2025-8076 7.2 HighNovember 18, 2025
• smci mbd-x13sedw-f Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability CVE-2025-7623 5.4 MediumNovember 18, 2025
• smci sys-111c-nr Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability CVE-2025-7704 5.4 MediumNovember 13, 2025
• smci mbd-x12stw Supermicro BMC firmware update validation bypass CVE-2025-7937 7.2 HighSeptember 19, 2025
• smci x13sem-f Supermicro BMC firmware update validation bypass CVE-2025-6198 7.2 HighSeptember 19, 2025
• smci mbd-x12dpg-oa6 fld->used_bytes without sanity check causes stack overflow CVE-2024-10239 7.2 HighFebruary 4, 2025
• smci mbd-x12dpg-oa6 fld->used_bytes without sanity check causes stack overflow CVE-2024-10238 7.2 HighFebruary 4, 2025
• smci mbd-x12dpg-oa6 SMC BMC Firmware Image Authentication Design Issue CVE-2024-10237 7.2 HighFebruary 4, 2025