CVE-2019-16649

CVE-2019-16649 affects Supermicro H11/H12/M11/X9/X10/X11 products. The issue stems from a combination of encryption and authentication problems in the virtual media service, enabling capture of BMC credentials and data transferred over virtual media devices. Attackers who obtain credentials can c...

CVE-2019-16650

CVE-2019-16650 affects Supermicro X10/X11 BMCs. The vulnerability stems from improper authentication in the virtual media service, allowing an attacker to transfer a client’s access privileges to another client that shares the same socket file descriptor. In practice, a remote attacker could conn...

CVE-2018-13787

CVE-2018-13787 affects certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products. The issue is a misconfigured Descriptor Region that could allow OS programs to modify firmware. IBM Power Systems advisories (POWER8/POWER9) reference addressing this CVE via firmware updates...