CVE-2023-40289

CVE-2023-40289 This is an exploit for CVE-2023-40289, a command injection vulnerability in several Baseband Management Controllers BMC by with firmware by ATEN. Examples of affected devices include Aspeed's AST2300 or AST2500, which can be found on Supermicro's X10 and X11 series server systems,...

SuperMicro-Password-Scanner

Supermicro IPMI/BMC Cleartext Password Scanner v20140622 by 1N3 https://crowdshield.com Usage: sh supermicroscan.sh proxy ABOUT: Supermicro’s implementation of IPMI/BMC allows remote, unauthenticated attackers to request the file PSBlock via port 49152. This plain text password file contains IPMI...

CVE-2023-34853

CVE-2023-34853 This repository is used to disclose some details about CVE-2023-34853. The vulnerability appears in Supermicro motherboard X12DPG-QR 1.4b and will be fixed in version 1.5. In the SmcSecureErase file GUID: 2B7C2FD1-C1CF-AB1D-C3BB-D1D691FB131E within the BIOS firmware, there is a sta...

CVE-2026-65213

The Supermicro BMC IPMI feature contains a vulnerability that may allow an IPMI authenticated administrator to perform Arbitrary Command Execution with superuser privileges . This flaw, identified as CWE-78 (OS Command Injection), enables the execution of commands as the operating system root use...

CVE-2026-65211

The Supermicro BMC IPMI feature contains a vulnerability that allows an authenticated IPMI Administrator to perform arbitrary read and write operations on the BMC physical memory . This flaw can lead to arbitrary code execution on the BMC operating system. The vulnerability is categorized under C...

CVE-2026-65210

A vulnerability in the Supermicro BMC IPMI feature allows an authenticated IPMI Administrator to perform arbitrary file access on the BMC filesystem. This flaw enables the disclosure of sensitive material beyond the intended scope of the IPMI management role. The root cause is associated with CWE...

CVE-2026-65220

A logic flaw in the BMC IPMI implementation of Supermicro products allows an attacker to escalate an account to administrator privileges . This vulnerability is triggered by sending specially crafted RAKP+ messages . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-65219

A flaw in the BMC RAKP+ implementation on Supermicro hardware allows an attacker to send a request followed by a specially crafted RAKP message. This vulnerability enables the attacker to establish an RMCP+ session , which can then be used to execute commands . The root cause is identified as an ...

CVE-2026-18451

The Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to weaknesses in the HTML5 KVM-over-IP console token generation. Specifically, the use of a predictable time-seeded launch token may allow an attacker to guess the session token and gain control of the KVM session. The v...

CVE-2026-18450

The Supermicro BMC contains a vulnerability where it fails to correctly enforce integrity and encryption requirements for IPMI commands. This flaw allows an attacker to craft malicious packets to execute arbitrary commands on an active session. Exploitation details and specific affected versions ...

CVE-2026-18449

The Supermicro BMC contains a SMCRAKP Fixed Key vulnerability where the BMC fails to properly enforce integrity and encryption requirements for IPMI commands . An attacker can craft specific packets to execute arbitrary commands during an active session. The vulnerability is associated with CWE-7...

CVE-2026-16521

A command injection vulnerability exists in the Supermicro BMC syslog feature due to insufficient input filtering. An attacker can inject a command payload into a BMC function, which may execute when the associated service restarts. This flaw is associated with CWE-78 and has a CVSS 3.1 score of ...

Astra Linux – Vulnerability in freeipmi

In FreeIPMI, the ipmi-oem command before version 1.6.17 has exploitable buffer overflows in the response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. This specification is implemented by a large number of hardware...

Rocky Linux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.6:CLSA-2026:1778618041)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778618041 advisory. - ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface...

AlmaLinux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.6:CLSA-2026:1778618041)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778618041 advisory. - ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPM...

phymem-exploit

phymem-exploit Proof-of-concept exploit for Supermicro's phym...

Supermicro BMC Login Panel - Detect

Supermicro BMC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Supermicro BMC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Supermicro BMC Login Panel - Detect',...

EUVD-2026-47615

Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...

CVE-2026-3821

Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...

CVE-2026-3821 Supermicro SMASH service contain an Arbitrary code execution issue

Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...