**Name of the Vulnerable Software and Affected Versions**

Supermicro BMC firmware versions (affected versions not specified)

**Description**

A flaw exists in the firmware validation logic of Supermicro BMC firmware on Supermicro MBD-X12STW. An attacker can potentially update the system firmware using a specially crafted image. Successful exploitation allows the execution of a malicious firmware update. A proof-of-concept demonstrates the ability to install and execute a malformed BMC firmware update image.

**Recommendations**

At the moment, there is no information about a newer version that contains a fix for this vulnerability.