PT-2025-37085 · Supermicro · Supermicro Bmc Firmware

Binarly Inc

·

Published

2025-09-10

·

Updated

2025-09-25

·

CVE-2025-6198

CVSS v3.1
7.2
VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

**Name of the Vulnerable Software and Affected Versions**

Supermicro BMC firmware versions (affected versions not specified)

**Description**

A flaw exists in the Supermicro BMC firmware validation logic on Supermicro MBD-X13SEM-F. This allows an attacker to update the system firmware with a specially crafted image. The issue enables a “bring your own vulnerable firmware image” (BYOVD) style persistence in server infrastructure.

**Recommendations**

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

Related Identifiers

CVE-2025-6198

Affected Products

Supermicro Bmc Firmware