PT-2026-46158 · Smci · As-2115Hs-Tnr

Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-3820

NVD

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR.  An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process invocation.

Potential impact includes denial-of-service attacks, arbitrary code execution, or permanent compromise of the controller.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-3820

Affected Products

As-2115Hs-Tnr

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-3820 · Security Note
• https://supermicro.com/en/support/security_BMC_IPMI_Jun_2026 · Note