PT-2019-14739 · Supermicro · Supermicro X10+1

Published 2019-09-21 · Updated 2020-08-24 · CVE-2019-16650

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Supermicro X10 and X11 products (affected versions not specified)

Description The issue allows a client's access privileges to be transferred to a different client that later has the same socket file descriptor number. An attacker can exploit this by connecting to the virtual media service and then connecting virtual USB devices to the server managed by the BMC.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-16650

Affected Products

Supermicro X10

Supermicro X11

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-16650 · Security Note
• https://supermicro.com/support/security_BMC_virtual_media.cfm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-16650 · Vendor Advisory
• https://github.com/eclypsium/USBAnywhere · Note
• https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack · Note