MEDIUM🇵🇱 Wersja polska

CVE-2018-13787

CVSS 6.7v3.0pub. 2018-07-09upd. 2024-11-21

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Supermicro X10drg

    HW
    Supermicro
    all versions

  • Supermicro X10drg Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drgh

    HW
    Supermicro
    all versions

  • Supermicro X10drgh Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drgo

    HW
    Supermicro
    all versions

  • Supermicro X10drgo Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drh

    HW
    Supermicro
    all versions

  • Supermicro X10drh4

    HW
    Supermicro
    all versions

  • Supermicro X10drh4 Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drh Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10dri1

    HW
    Supermicro
    all versions

  • Supermicro X10dri1 Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drl

    HW
    Supermicro
    all versions

  • Supermicro X10drlc

    HW
    Supermicro
    all versions

  • Supermicro X10drlc Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drl Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drln

    HW
    Supermicro
    all versions

  • Supermicro X10drln Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drs

    HW
    Supermicro
    all versions

  • Supermicro X10drs Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drt

    HW
    Supermicro
    all versions

  • Supermicro X10drtb

    HW
    Supermicro
    all versions

  • Supermicro X10drtb Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drt Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drth

    HW
    Supermicro
    all versions

  • Supermicro X10drth Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drtl

    HW
    Supermicro
    all versions

  • Supermicro X10drtl Firmware

    OS
    Supermicro
    all versions

  • Supermicro X10drtps

    HW
    Supermicro
    all versions

  • Supermicro X10drtps Firmware

    OS
    Supermicro
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-43309MEDIUM5.5same product

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

CVE-2023-35861CRITICAL9.8PL ✓same vendor

Command injection w powiadomieniach email Supermicro BMC — wykonanie poleceń jako root

CVE-2019-16650CRITICAL10.0PL ✓same vendor

Supermicro BMC: nieuprawniony dostęp do wirtualnych urządzeń USB (USBAnywhere)

CVE-2019-16649CRITICAL10.0PL ✓same vendor

Supermicro BMC: przechwycenie poświadczeń przez podatny serwis virtual media

CVE-2019-13131CRITICAL9.8PL ✓same vendor

RCE w Supermicro SuperDoctor 5 poprzez NRPE bez ograniczeń