CVE-2025-6198

Name of the Vulnerable Software and Affected Versions Supermicro BMC firmware versions (affected versions not specified)

Description The Supermicro BMC firmware contains a flaw in its firmware validation logic. This allows an attacker to update the system firmware with a specially crafted image, potentially enabling “bring your own vulnerable firmware image” (BYOVD) style persistence. The vulnerability resides in the BMC firmware signature validation logic. The issue affects Supermicro MBD-X13SEM-F. The vulnerability allows remote attackers to update the system firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.