Advisories · Technology
SMCI MBD-X12SPI.
Every CVE that names SMCI MBD-X12SPI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.6 Medium
Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
- SMCI MBD-X12SPI
- Command injection
- CVSS 7.2 High
Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
- SMCI MBD-X12SPI
- Authentication bypass
- CVSS 4.9 Medium
Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
- SMCI MBD-X12SPI
- Information disclosure
- CVSS 8.8 High
Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
- SMCI MBD-X12SPI
- Privilege escalation
- CVSS 7.4 High
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
- SMCI MBD-X12SPI
- CWE-696
- CVSS 3.1 Low
Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
- SMCI MBD-X12SPI
- CWE-337