PT-2025-1580 · Supermicro · Supermicro Mbd-X12Dpg-Oa6

Alexander Tereshkin · Publicado 2025-02-04 · Atualizado 2025-09-29 · CVE-2024-10237

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Supermicro BMC firmware versions (affected versions not specified)

Description The Baseboard Management Controller (BMC) firmware has a flaw in its firmware image authentication design. An attacker can modify the firmware to bypass BMC inspection and the signature verification process. This allows for unauthorized modifications to the BMC firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-347

CWE-345

Identificadores relacionados

CVE-2024-10237

Produtos afetados

Supermicro Mbd-X12Dpg-Oa6

Referências · 12

• https://t.me/true_secator/7461 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1886690684377375110 · Publicação no Twitter
• https://t.me/cvenotify/109811 · Publicação no Telegram
• https://twitter.com/matrosov/status/1940903113051066561 · Publicação no Twitter
• https://supermicro.com/en/support/security_BMC_IPMI_Jan_2025 · Nota
• https://twitter.com/binarly_io/status/1940442925462405297 · Publicação no Twitter
• https://twitter.com/binarly_io/status/1970610777624358990 · Publicação no Twitter
• https://twitter.com/binarly_io/status/1970554551507042315 · Publicação no Twitter
• https://t.me/CyberSecurityTechnologies/12403 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2024-10237 · Nota de Segurança
• https://twitter.com/TweetThreatNews/status/1970951359848456583 · Publicação no Twitter
• https://t.me/purp_sec/1150 · Publicação no Telegram