CRITICAL🇵🇱 Wersja polska

CVE-2019-16650

CVSS 10.0v3.1pub. 2019-09-21upd. 2024-11-21

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the server managed by the BMC.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Supermicro X11dac

    HW
    Supermicro
    all versions

  • Supermicro X11dac Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dai N

    HW
    Supermicro
    all versions

  • Supermicro X11dai N Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11ddw L

    HW
    Supermicro
    all versions

  • Supermicro X11ddw L Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11ddw Nt

    HW
    Supermicro
    all versions

  • Supermicro X11ddw Nt Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dgo T

    HW
    Supermicro
    all versions

  • Supermicro X11dgo T Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dgq

    HW
    Supermicro
    all versions

  • Supermicro X11dgq Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dpff Sn

    HW
    Supermicro
    all versions

  • Supermicro X11dpff Sn Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dpfr S

    HW
    Supermicro
    all versions

  • Supermicro X11dpfr S Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dpfr Sn

    HW
    Supermicro
    all versions

  • Supermicro X11dpfr Sn Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dpg Ot Cpu

    HW
    Supermicro
    all versions

  • Supermicro X11dpg Ot Cpu Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dpg Qt

    HW
    Supermicro
    all versions

  • Supermicro X11dpg Qt Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dpg Sn

    HW
    Supermicro
    all versions

  • Supermicro X11dpg Sn Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dph I

    HW
    Supermicro
    all versions

  • Supermicro X11dph I Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dph T

    HW
    Supermicro
    all versions

  • Supermicro X11dph T Firmware

    OS
    Supermicro
    1.71.5

  • Supermicro X11dph Tq

    HW
    Supermicro
    all versions

  • Supermicro X11dph Tq Firmware

    OS
    Supermicro
    1.71.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-16649CRITICAL10.0PL ✓same product

Supermicro BMC: przechwycenie poświadczeń przez podatny serwis virtual media

CVE-2022-43309MEDIUM5.5same product

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

CVE-2023-35861CRITICAL9.8PL ✓same vendor

Command injection w powiadomieniach email Supermicro BMC — wykonanie poleceń jako root

CVE-2019-13131CRITICAL9.8PL ✓same vendor

RCE w Supermicro SuperDoctor 5 poprzez NRPE bez ograniczeń

CVE-2023-40284HIGH8.3same vendor

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit...