What’s Vulnerable › Vulnerabilities

CVE-2024-10237: SMC BMC Firmware Image Authentication Design Issue

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-04 · updated 2026-06-17
• Weakness: CWE-345

Description

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process

Affected products

• SMCI MBD-X12DPG-OA6: 1.04.16

References

• https://www.supermicro.com/en/support/security_BMC_IPMI_Jan_2025

Get alerted when CVE-2024-10237 or the next vulnerability affects your stack