The vulnerability in the web interface of Supermicro MBD-X12STW BMC IPMI servers allows a hacker to update the system’s firmware.

The vulnerability of the BMC IPMI server web interface of Supermicro MBD-X12STW is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to remotely update the system’s firmware...

CVE-2025-7937 Supermicro BMC firmware update validation bypass

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image...