497 matches found
SuperMicro-Password-Scanner
Supermicro IPMI/BMC 평문 비밀번호 스캐너 v20140622 by 1N3 https://crowdshield.com 사용법: sh supermicroscan.sh 프록시 소개: Supermicro의 IPMI/BMC 구현은 원격의 인증되지 않은 공격자가 포트 49152를 통해 PSBlock 파일을 요청할 수 있도록 합니다. 이 평문 비밀번호 파일에는 IPMI 사용자 이름과 비밀번호 정보가 포함되어 있습니다. 이 스크립트는 사용자가 네트워크를 스캔하여 패치가 필요한 취약한 시스템을 확인할 수 있도록 합니다. 사용법:...
CVE-2023-34853
CVE-2023-34853 Ce dépôt est utilisé pour divulguer certains détails sur CVE-2023-34853. La vulnérabilité apparaît dans la carte mère Supermicro X12DPG-QR 1.4b et sera corrigée dans la version 1.5. Dans le fichier SmcSecureErase GUID : 2B7C2FD1-C1CF-AB1D-C3BB-D1D691FB131E du firmware BIOS, il exis...
Rocky Linux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.6:CLSA-2026:1778618041)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778618041 advisory. - ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface...
AlmaLinux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.6:CLSA-2026:1778618041)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778618041 advisory. - ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPM...
CVE-2023-40289
CVE-2023-40289 Ceci est un exploit pour CVE-2023-40289, une vulnérabilité d'injection de commandes dans plusieurs contrôleurs de gestion de base BMC équipés du firmware d'ATEN. Des exemples d'appareils concernés incluent l'AST2300 ou l'AST2500 d'Aspeed, que l'on trouve entre autres sur les systèm...
Astra Linux – Vulnerability in freeipmi
In FreeIPMI, the ipmi-oem command before version 1.6.17 has exploitable buffer overflows in the response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. This specification is implemented by a large number of hardware...
phymem-exploit
phymem-exploit Proof-of-concept exploit for Supermicro's phym...
CVE-2026-3821
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
CVE-2026-3821 Supermicro SMASH service contain an Arbitrary code execution issue
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
CVE-2026-3821 Supermicro SMASH service contain an Arbitrary code execution issue
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
EUVD-2026-47615
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
CVE-2026-3821: Improper Neutralization of Special Elements used in an OS Command
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
PT-2026-63327
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
CVE-2026-3820
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...
CVE-2026-3820
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...
CVE-2026-3820 Supermicro BMC's SMTP service contains a command injection vulnerability
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...
EUVD-2026-34226
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...
CVE-2026-3820 Supermicro BMC's SMTP service contains a command injection vulnerability
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process...
CVE-2026-3820
The CVE-2026-3820 entry pertains to Supermicro BMC’s SMTP service on the AS-2115HS-TNR. The vulnerability allows an attacker to obtain administrator privileges by injecting specially crafted characters into the SMTP service configuration, which can lead to command execution when the process is in...
PT-2026-46158
Name of the Vulnerable Software and Affected Versions Supermicro AS-2115HS-TNR affected versions not specified Description The SMTP service in the Supermicro BMC contains a command injection flaw. An attacker with administrator privileges can inject specially crafted characters into the SMTP...