PT-2024-5266 · Supermicro · Supermicro X11Pdg-Ot+2

Eason + 1 · Published 2024-07-15 · Updated 2024-08-01 · CVE-2024-36432

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Supermicro X11DPG-HGX2 versions prior to BIOS firmware 4.4 Supermicro X11PDG-QT versions prior to BIOS firmware 4.4 Supermicro X11PDG-OT versions prior to BIOS firmware 4.4 Supermicro X11PDG-SN versions prior to BIOS firmware 4.4

Description An arbitrary memory write vulnerability was discovered, which may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The issue is related to a buffer overflow in the BMC controller's firmware.

Recommendations For Supermicro X11DPG-HGX2, update the BIOS firmware to version 4.4 or later. For Supermicro X11PDG-QT, update the BIOS firmware to version 4.4 or later. For Supermicro X11PDG-OT, update the BIOS firmware to version 4.4 or later. For Supermicro X11PDG-SN, update the BIOS firmware to version 4.4 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-1246

CWE-119

Related Identifiers

BDU:2024-05885

CVE-2024-36432

Affected Products

Supermicro X11Dpg-Hgx2

Supermicro X11Pdg-Ot

Supermicro X11Pdg-Sn

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-36432 · Security Note
• https://bdu.fstec.ru/vul/2024-05885 · Security Note
• https://supermicro.com/en/support/security_center#%21advisories · Note
• https://t.me/cvenotify/86266 · Telegram Post
• https://supermicro.com/zh_tw/support/security_BIOS_Jul_2024 · Note
• https://vuldb.com/?id.271523 · Note
• https://t.me/cvedetector/897 · Telegram Post
• https://supermicro.com/en/support/security_BIOS_Jul_2024 · Note