PT-2025-38505 · Supermicro · Supermicro Mbd-X12Stw +1

Binarly Inc

·

Published

2025-09-19

·

Updated

2025-09-26

·

CVE-2025-7937

CVSS v3.1
7.2
VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

**Name of the Vulnerable Software and Affected Versions**

Supermicro BMC firmware versions (affected versions not specified)

**Description**

An issue exists in the Supermicro BMC firmware validation logic on Supermicro MBD-X12STW. An attacker can update the system firmware with a specially crafted image. Proof of concept demonstrates that a malformed BMC firmware update image can be installed and successfully executed, potentially creating persistent backdoors.

**Recommendations**

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2025-7937

Affected Products

Supermicro Bmc Firmware
Supermicro Mbd-X12Stw