SuperMicro-Password-Scanner

Supermicro IPMI/BMC Cleartext Password Scanner v20140622 by 1N3 https://crowdshield.com Usage: sh supermicroscan.sh proxy ABOUT: Supermicro’s implementation of IPMI/BMC allows remote, unauthenticated attackers to request the file PSBlock via port 49152. This plain text password file contains IPMI...

CVE-2026-65213 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...

CVE-2026-65213

The Supermicro BMC IPMI feature contains a vulnerability that may allow an IPMI authenticated administrator to perform Arbitrary Command Execution with superuser privileges . This flaw, identified as CWE-78 (OS Command Injection), enables the execution of commands as the operating system root use...

CVE-2026-65211

The Supermicro BMC IPMI feature contains a vulnerability that allows an authenticated IPMI Administrator to perform arbitrary read and write operations on the BMC physical memory . This flaw can lead to arbitrary code execution on the BMC operating system. The vulnerability is categorized under C...

CVE-2026-65211 Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system...

CVE-2026-65210 Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role...

CVE-2026-65210

A vulnerability in the Supermicro BMC IPMI feature allows an authenticated IPMI Administrator to perform arbitrary file access on the BMC filesystem. This flaw enables the disclosure of sensitive material beyond the intended scope of the IPMI management role. The root cause is associated with CWE...

CVE-2026-65219 Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands...

CVE-2026-65219

A flaw in the BMC RAKP+ implementation on Supermicro hardware allows an attacker to send a request followed by a specially crafted RAKP message. This vulnerability enables the attacker to establish an RMCP+ session , which can then be used to execute commands . The root cause is identified as an ...

CVE-2026-18451

The Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to weaknesses in the HTML5 KVM-over-IP console token generation. Specifically, the use of a predictable time-seeded launch token may allow an attacker to guess the session token and gain control of the KVM session. The v...

CVE-2026-18451 Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session...

CVE-2026-18450

The Supermicro BMC contains a vulnerability where it fails to correctly enforce integrity and encryption requirements for IPMI commands. This flaw allows an attacker to craft malicious packets to execute arbitrary commands on an active session. Exploitation details and specific affected versions ...

CVE-2026-18450 Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-18449 Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-18449

The Supermicro BMC contains a SMCRAKP Fixed Key vulnerability where the BMC fails to properly enforce integrity and encryption requirements for IPMI commands . An attacker can craft specific packets to execute arbitrary commands during an active session. The vulnerability is associated with CWE-7...

CVE-2026-16521

A command injection vulnerability exists in the Supermicro BMC syslog feature due to insufficient input filtering. An attacker can inject a command payload into a BMC function, which may execute when the associated service restarts. This flaw is associated with CWE-78 and has a CVSS 3.1 score of ...

CVE-2026-16521 Supermicro BMC's syslog feature contains a command injection vulnerability

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

CVE-2026-3820 Supermicro BMC's SMTP service contains a command injection vulnerability

There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...

EUVD-2026-34226

There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...

CVE-2026-3820 Supermicro BMC's SMTP service contains a command injection vulnerability

There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...