Divulgación de vulnerabilidades:
El objetivo de esta divulgación es comunicar las posibles vulnerabilidades que afectan a Supermicro y que han sido comunicadas por un investigador externo.
Agradecimientos:
Supermicro would like to acknowledge the work done by Coreweave Red Team and Hoang Bui from Coreweave, for discovering potential vulnerabilities in the Supermicro BMC Firmware.
Resumen:
Four security issues have been discovered in select supermicro boards. These issues may affect Supermicro BMC Firmware.
| ID CVE | Gravedad | Tipo de emisión | Descripción |
|---|---|---|---|
| Mediana | Desbordamiento del búfer basado en pila | Desbordamiento del búfer basado en pila en el shell SMASH-CLP. Un atacante autenticado con acceso SSH al BMC puede explotar un desbordamiento del búfer de pila a través de un comando SMASH crafteado, sobrescribir la dirección de retorno y los registros, y lograr la ejecución de código arbitrario en el sistema operativo del firmware del BMC. Puntuación Supermicro : 5,4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) | |
| Alta | Desbordamiento del búfer basado en pila | There is a vulnerability in the Supermicro BMC web function. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability. Puntuación Supermicro : 7,2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) | |
| Mediana | Desbordamiento del búfer basado en pila | Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system. Supermicro CVSSv3 score: 5.5 (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) | |
| Alta | Desbordamiento del búfer basado en pila | There is a vulnerability in the Supermicro BMC web function. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability. Puntuación Supermicro : 7,2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) |
Productos afectados:
Supermicro en placas base y CMM seleccionadas.
7623
| Placa base | BMC FW con el Fix |
|---|---|
| MBB-CMM-6 | 01.02.04 |
| MBD-B12DPE-6 | 01.07.03 |
| MBD-B12DPT-6 | 01.07.03 |
| MBD-B12SPE-CPU-25G | 01.07.03 |
| MBD-B13DEE | 01.05.03 |
| MBD-B13DET | 01.05.03 |
| MBD-B13SEE-CPU-25G | 01.05.03 |
| MBD-B13SEG | 01.05.03 |
| MBD-B14DBE | 01.03.00.03 |
| MBD-B14DBE-AP | 01.03.00.03 |
| MBD-B14DBT | 01.03.00.03 |
| MBD-B14SBE-CPU-25G | 01.03.00.03 |
| MBD-B14SBE-CPU-AP | 01.03.00.03 |
| MBD-B3SD1-20C-25G | 01.03.00.03 |
| MBD-B3ST1-CPU-001 | 01.07.03 |
| MBD-B4SA1-CPU | 01.05.03 |
| MBD-B4SC1-CPU | 01.05.03 |
| MBD-G1SMH | 01.05.03 |
| MBD-G1SMH-G | 01.05.03 |
| MBD-G2DMH-GI | 01.03.00.03 |
| MBD-H12SSFF-AN6 | 01.07.03 |
| MBD-BH12SSI-M25 | 01.07.03 |
| MBD-H13DSGM | 01.05.03 |
| MBD-H13QSH | 01.05.03 |
| MBD-H13SRH | 01.05.03 |
| MBD-H13SSF | 01.05.03 |
| MBD-H13SSH | 01.05.03 |
| MBD-H14DSGD | 01.03.00.03 |
| MBD-H14DSGM | 01.03.00.03 |
| MBD-H14DST-F | 01.03.00.04 |
| MBD-H14SHM | 01.01.06.00 |
| MBD-X11DGQ | 3.77.16 |
| MBD-X11DPD-L | 3.77.16 |
| MBD-X11DPD-M25 | 3.77.16 |
| MBD-X11DPFF-SN | 3.77.16 |
| MBD-X11DPFF-SNR | 1.01.26 |
| MBD-X11DPL-I | 3.77.16 |
| MBD-X11DPS-R | 3.77.16 |
| MBD-X11DPS-RE | 3.77.16 |
| MBD-X11DPT-L | 3.77.16 |
| MBD-X11DSC+ | 3.77.16 |
| MBD-X11DSF-E | 3.77.16 |
| MBD-X11SCW-F | 3.77.16 |
| MBD-X11SCW-F-AM047 | 3.77.16 |
| MBD-X12DGQ-R | 01.07.03 |
| MBD-X12DPD-A6M25 | 01.07.03 |
| MBD-X12DPGA6 | 01.07.03 |
| MBD-X12DPGA6-GD2 | 01.07.03 |
| MBD-X12DPG-QR | 01.07.03 |
| MBD-X12DPT | 01.07.03 |
| MBD-X12DPT6 | 01.07.03 |
| MBD-X12DPTT6 | 01.07.03 |
| MBD-X12SPTT | 01.07.03 |
| MBD-X12STW-F | 01.07.03 |
| MBD-X12STW-TF | 01.07.03 |
| MBD-X13DEH | 01.05.03 |
| MBD-X13DEM | 01.05.03 |
| MBD-X13DET | 01.05.03 |
| MBD-X13DSF-A | 01.05.03 |
| MBD-X13OEI-CPU | 01.05.03 |
| MBD-X13SAW-F | 01.05.03 |
| MBD-X13SAW-TLN4F | 01.05.03 |
| MBD-X13SCW-F | 01.05.03 |
| MBD-X13SEDW-F | 01.05.03 |
| MBD-X13SEED-F | 01.05.03 |
| MBD-X13SEED-SF | 01.05.03 |
| MBD-X13SEFR-A | 01.05.03 |
| MBD-X13SEM-F | 01.05.03 |
| MBD-X13SEM-TF | 01.05.03 |
| MBD-X13SETT | 01.05.03 |
| MBD-X13SEVR-SP13F | 01.05.03 |
| MBD-X14DBG-AP | 01.01.16.00 |
| MBD-X14DBG-DAP | 1.01.17.00 |
| MBD-X14DBG-GD | 01.03.00.03 |
| MBD-X14DBG-LC | 01.03.00.03 |
| MBD-X14DBG-LC+ | 01.03.00.03 |
| MBD-X14DBG-MAP | 01.03.00.03 |
| MBD-X14DBG-XAP | 01.03.00.03 |
| MBD-X14DBHM | 1.01.06.00 |
| MBD-X14DBI | 01.01.16.00 |
| MBD-X14DBI | 01.01.16.00 |
| MBD-X14DBI-T | 01.01.16.00 |
| MBD-X14DBI-T | 01.01.16.00 |
| MBD-X14DBM-AP | 01.07.03 |
| MBD-X14DBM-APL | 01.07.03 |
| MBD-X14DBM-SP | 01.07.03 |
| MBD-X14DBT | 01.07.03 |
| MBD-X14DBT-FAP | 01.07.03 |
| MBD-X14DBT-SOLAPA | 01.07.03 |
| MBD-X14QBH+ | 01.07.03 |
| MBD-X14SAE-F | 01.01.17.00 |
| MBD-X14SAE-F | 01.01.17.00 |
| MBD-X14SAE-F | 01.01.17.00 |
| MBD-X14SAV-F | 01.01.17.00 |
| MBD-X14SAV-F | 01.01.17.00 |
| MBD-X14SAV-F | 01.01.17.00 |
| MBD-X14SAV-TLN4F | 01.01.17.00 |
| MBD-X14SAV-TLN4F | 01.01.17.00 |
| MBD-X14SAV-TLN4F | 01.01.17.00 |
| MBD-X14SAZ-F | 01.01.17.00 |
| MBD-X14SAZ-TLN4F | 01.01.17.00 |
| MBD-X14SAZ-TLN4F | 01.01.17.00 |
| MBD-X14SAZ-TLN4F | 01.01.17.00 |
| MBD-X14SBGM | 01.03.00.03 |
| MBD-X14SBH | 01.07.03 |
| MBD-X14SBH-AP | 01.07.03 |
| MBD-X14SBHM | 01.03.00.03 |
| MBD-X14SBI-F | 01.01.16.00 |
| MBD-X14SBI-TF | 01.01.16.00 |
| MBD-X14SBM-TF | 01.07.03 |
| MBD-X14SBM-TP4F | 01.07.03 |
| MBD-X14SBSC | 01.01.06.00 |
| MBD-X14SBT-G | 01.03.00.03 |
| MBD-X14SBT-GAP | 01.03.00.03 |
| MBD-X14SBW-F | 01.01.16.00 |
| MBD-X14SBW-TF | 01.01.16.00 |
| MBD-X14SDV-20C-SP3F | 01.07.03 |
| MBD-X14SDV-32C-SP3F | 01.07.03 |
| MBD-X14SDV-36CE-SP3F | 01.07.03 |
| MBD-X14SDV-36C-SP3F | 01.07.03 |
| MBD-X14SDV-42C-SP3F | 01.07.03 |
| MBD-X14SDW-42C-SP9F | 01.07.03 |
| MBD-X14SRA-F | 01.01.17.00 |
| MBM-CMM-6 | 01.02.04 |
| MBM-CMM-6-01-FI005 | 01.02.04 |
| MBM-CMM-6-01-HN004 | 01.02.04 |
| MBM-CMM-6-IN001 | 01.02.04 |
8076
| Placa base | BMC FW con el Fix |
|---|---|
| MBB-CMM-6 | 01.02.04 |
| MBD-B13DEE | 01.05.05 |
| MBD-B13DET | 01.05.05 |
| MBD-B13SEE-CPU-25G | 01.05.05 |
| MBD-B13SEG | 01.05.05 |
| MBD-B3SD1-20C-25G | 01.07.04 |
| MBD-B3ST1-CPU-001 | 01.07.04 |
| MBD-B4SA1-CPU | 01.05.05 |
| MBD-B4SC1-CPU | 01.05.05 |
| MBD-G1SMH | 01.05.05 |
| MBD-G1SMH-G | 01.05.05 |
| MBD-G2DMH-G | 01.05.05 |
| MBD-H12SSFF-AN6 | 01.07.04 |
| MBD-H14DSH-TI036 | 01.03.00.06 |
| MBD-H14DST-F | 01.03.00.06 |
| MBD-BH4SRG | 01.05.05 |
| MBD-X12DGQ-R | 01.07.04 |
| MBD-X12DPG-QR | 01.07.04 |
| MBD-X13DEH | 01.05.05 |
| MBD-X13OEI-CPU | 01.05.05 |
| MBD-X13SAW-F | 01.05.05 |
| MBD-X13SAW-TLN4F | 01.05.05 |
| MBD-X13SCW-F | 01.05.05 |
| MBD-X13SCW-F | 01.05.05 |
| MBD-X13SCW-F | 01.05.05 |
| MBD-X14DBG-GD | 01.03.00.06 |
| MBD-X14DBG-XAP | 01.03.00.06 |
| MBD-X14SBT-G | 01.03.00.06 |
| MBD-X14SBT-GAP | 01.03.00.06 |
| MBM-CMM-6 | 01.02.04 |
| MBM-CMM-6-01-FI005 | 01.02.04 |
| MBM-CMM-6-01-HN004 | 01.02.04 |
| MBM-CMM-6-IN001 | 01.02.04 |
8404
| Placa base | BMC FW con el Fix |
|---|---|
| MBD-A2SD1-3750F | 1.77 |
| MBD-A2SD1-3955F | 1.77 |
| MBD-K1SPE-IN001 | 1.77 |
| MBD-K1SPE | 1.77 |
| MBD-K1SPE-T | 1.77 |
| MBD-K1SPI | 1.77 |
| MBD-K1SPI-T | 1.77 |
| MBD-X11SAE-F | 1.77 |
| MBD-X11SAE | 1.77 |
| MBD-X11SAT | 1.77 |
| MBD-X11SAT-F | 1.77 |
| MBD-X11SBA-F | 1.77 |
| MBD-X11SBA-LN4F | 1.77 |
| MBD-X11SSD-F | 1.77 |
| MBD-X11SSE-F | 1.77 |
| MBD-X11SSE-F-TEST | 1.77 |
| MBD-X11SSQ | 1.77 |
| MBD-X11SSV-M4 | 1.77 |
| MBD-X11SSV-M4F | 1.77 |
| MBD-X11SSV-Q | 1.77 |
| MBD-X11SSZ-F | 1.77 |
| MBD-X11SSZ-QF | 1.77 |
| MBD-X11SSZ-TLN4F | 1.77 |
| MBD-C7X299GF | 1.74.19 |
| MBD-C7X299-RPGF | 1.74.19 |
| MBD-C9X299G | 1.74.19 |
| MBD-C9X299G300F | 1.74.19 |
| MBD-C9X299GF | 1.74.19 |
| MBD-C9X299-RPGF | 1.74.19 |
| MBD-X11DAC | 1.74.19 |
| MBD-X11DAI-N | 1.74.19 |
| MBD-X11DDW-L | 1.74.19 |
| MBD-X11DDW-NT | 1.74.19 |
| MBD-X11DPFR-S-LC019 | 1.74.19 |
| MBD-X11DPFR-S | 1.74.19 |
| MBD-X11DPFR-SN-LC019 | 1.74.19 |
| MBD-X11DPFR-SN | 1.74.19 |
| MBD-X11DPG-21CIE | 1.74.19 |
| MBD-X11DPGCIE | 1.74.19 |
| MBD-X11DPGT-CPU | 1.74.19 |
| MBD-X11DPG-QT | 1.74.19 |
| MBD-X11DPG-SN-LC019 | 1.74.19 |
| MBD-X11DPG-SN | 1.74.19 |
| MBD-X11DPH-I | 1.74.19 |
| MBD-X11DPH-T | 1.74.19 |
| MBD-X11DPH-TQ | 1.74.19 |
| MBD-X11DPI-N | 1.74.19 |
| MBD-X11DPI-NI | 1.74.19 |
| MBD-X11DPI-NT | 1.74.19 |
| MBD-X11DPI | 1.74.19 |
| MBD-X11DPI-T | 1.74.19 |
| MBD-X11DPT+ | 1.74.19 |
| MBD-X11DPT | 1.74.19 |
| MBD-X11DPTH | 1.74.19 |
| MBD-X11DPTV | 1.74.19 |
| MBD-X11DPT-LC019 | 1.74.19 |
| MBD-X11DPTS | 1.74.19 |
| MBD-X11DPU+ | 1.74.19 |
| MBD-X11DPU-LC019 | 1.74.19 |
| MBD-X11DPU-NEBS | 1.74.19 |
| MBD-X11DPU | 1.74.19 |
| MBD-X11DPU-V | 1.74.19 |
| MBD-X11DPU-X | 1.74.19 |
| MBD-X11DPU-XLL | 1.74.19 |
| MBD-X11DPU-Z+ | 1.74.19 |
| MBD-X11DPX-T | 1.74.19 |
| MBD-X11DRI | 1.74.19 |
| MBD-X11DRI-T | 1.74.19 |
| MBD-X11DRTS | 1.74.19 |
| MBD-X11DRU+ | 1.74.19 |
| MBD-X11QPH+ | 1.74.19 |
| MBD-X11SCA-F | 1.74.19 |
| MBD-X11SCA | 1.74.19 |
| MBD-X11SCA-W | 1.74.19 |
| MBD-X11SCE-F | 1.74.19 |
| MBD-X11SCH-F | 1.74.19 |
| MBD-X11SCH-LN4F | 1.74.19 |
| MBD-X11SCL-F | 1.74.19 |
| MBD-X11SCL-IF | 1.74.19 |
| MBD-X11SCL-LN4F | 1.74.19 |
| MBD-X11SCM-F | 1.74.19 |
| MBD-X11SCM-LN8F | 1.74.19 |
| MBD-X11SCZ-F | 1.74.19 |
| MBD-X11SPG-TF | 1.74.19 |
| MBD-X11SPH-NCTF | 1.74.19 |
| MBD-X11SPH-NCTPF | 1.74.19 |
| MBD-X11SPI-TF | 1.74.19 |
| MBD-X11SPL-F | 1.74.19 |
| MBD-X11SPM-F | 1.74.19 |
| MBD-X11SPM-TF | 1.74.19 |
| MBD-X11SPM-TPF | 1.74.19 |
| MBD-X11SPW-CTF-001 | 1.74.19 |
| MBD-X11SPW-CTF | 1.74.19 |
| MBD-X11SPW-TF-001 | 1.74.19 |
| MBD-X11SPW-TF | 1.74.19 |
| MBD-X11SRA-F | 1.74.19 |
| MBD-X11SRA-RF | 1.74.19 |
| MBD-X11DGQ | 3.77.16 |
| MBD-X11DPD-L | 3.77.16 |
| MBD-X11DPD-M25 | 3.77.16 |
| MBD-X11DPFF-SN | 3.77.16 |
| MBD-X11DPL-I | 3.77.16 |
| MBD-X11DPS-R | 3.77.16 |
| MBD-X11DPS-RE | 3.77.16 |
| MBD-X11DPT-L | 3.77.16 |
| MBD-X11DSC+ | 3.77.16 |
| MBD-X11DSF-E | 3.77.16 |
| MBD-X11DSF | 3.77.16 |
| MBD-X11SCW-F-AM047 | 3.77.16 |
| MBD-X11SCW-F | 3.77.16 |
| MBD-H12DST | 3.10.48 |
| MBD-H12DSTS | 3.10.48 |
| MBD-H12DSU-IN | 3.10.48 |
| MBD-H12SSTS | 3.10.48 |
| MBD-H12SSW-IN | 3.10.48 |
| MBD-H12SSW-NT | 3.10.48 |
| MBD-H11DSI-7401-MA015 | 1.52.23 |
| MBD-H11DSI | 1.52.23 |
| MBD-H11DSI-DC023 | 1.52.23 |
| MBD-H11DSI-N702-MA015 | 1.52.23 |
| MBD-H11DSI-NT | 1.52.23 |
| MBD-H11DST | 1.52.23 |
| MBD-H11DSU-IN+ | 1.52.23 |
| MBD-H11DSU-IN | 1.52.23 |
| MBD-H11DSU-IN-TT031 | 1.52.23 |
| MBD-H11SSL-C | 1.52.23 |
| MBD-H11SSL-I | 1.52.23 |
| MBD-H11SSL-I251-MA015 | 1.52.23 |
| MBD-H11SSL-I302P-MA015 | 1.52.23 |
| MBD-H11SSL-I351P-MA015 | 1.52.23 |
| MBD-H11SSL-I401P-MA015 | 1.52.23 |
| MBD-H11SSL-I502P-MA015 | 1.52.23 |
| MBD-H11SSL-N551P-MA015 | 1.52.23 |
| MBD-H11SSL-N702P-MA015 | 1.52.23 |
| MBD-H11SSL-NC | 1.52.23 |
| MBD-H11SSW-IN | 1.52.23 |
| MBD-H11SSW-NT | 1.52.23 |
| MBD-X12DPI-N | 01.07.01 |
| MBD-X12DPI-NT | 01.07.01 |
| MBD-X12QCH+ | 01.07.01 |
| MBD-X12SPA-TF | 01.07.01 |
| MBD-X12SPG-NF | 01.07.01 |
| MBD-A3SPI-4C-HLN4F | 01.07.03 |
| MBD-A3SPI-4C-LN6PF | 01.07.03 |
| MBD-A3SPI-8C-HLN4F | 01.07.03 |
| MBD-A3SPI-8C-LN6PF | 01.07.03 |
| MBD-A3SSV-16C-SPLN10F | 01.07.03 |
| MBD-A3SSV-24C-SPLN10F | 01.07.03 |
| MBD-A3SSV-8C-SPLN10F | 01.07.03 |
| MBD-X12SCA-5F | 01.07.03 |
| MBD-X12SCA-F | 01.07.03 |
| MBD-X12SCZ-F | 01.07.03 |
| MBD-X12SCZ-F-SM005 | 01.07.03 |
| MBD-X12SCZ-QF | 01.07.03 |
| MBD-X12SCZ-TLN4F | 01.07.03 |
| MBD-X12SCZ-TLN4F-SM005 | 01.07.03 |
| MBD-B12DPT | 01.07.04 |
| MBD-BH12SSI-M25 | 01.07.04 |
| MBD-X12DAI-N6 | 01.07.05 |
| MBD-X12DDW-A6 | 01.07.05 |
| MBD-X12DHM-6 | 01.07.05 |
| MBD-X12DHM | 01.07.05 |
| MBD-X12DPFR-AN6 | 01.07.05 |
| MBD-X12DPG-AR | 01.07.05 |
| MBD-X12DPG-QBT6 | 01.07.05 |
| MBD-X12DPG-QT | 01.07.05 |
| MBD-X12DPG-QT6 | 01.07.05 |
| MBD-X12DPG-U6 | 01.07.05 |
| MBD-X12DPI-N6 | 01.07.05 |
| MBD-X12DPI-NT6 | 01.07.05 |
| MBD-X12DPL-I6 | 01.07.05 |
| MBD-X12DPL-NT6 | 01.07.05 |
| MBD-X12DPU-6 | 01.07.05 |
| MBD-X12DSC-A6 | 01.07.05 |
| MBD-X12SPED-F | 01.07.05 |
| MBD-X12SPI-TF | 01.07.05 |
| MBD-X12SPL-F | 01.07.05 |
| MBD-X12SPL-LN4F | 01.07.05 |
| MBD-X12SPM-LN4F | 01.07.05 |
| MBD-X12SPM-LN6TF | 01.07.05 |
| MBD-X12SPM-TF | 01.07.05 |
| MBD-X12SPO-F | 01.07.05 |
| MBD-X12SPO-NTF | 01.07.05 |
| MBD-X12SPW-F | 01.07.05 |
| MBD-X12SPW-TF-001 | 01.07.05 |
| MBD-X12SPW-TF | 01.07.05 |
| MBD-X12SPZ-LN4F | 01.07.05 |
| MBD-X12SPZ-SPLN6F | 01.07.05 |
| MBD-X12DPD-A6M25 | 01.07.04 |
| MBD-X12SPTT | 01.07.04 |
| MBD-H12DSG-CPU | 01.06.02 |
| MBD-H12DSU-INR | 01.06.02 |
| MBD-H12SSL-C | 01.06.02 |
| MBD-H12SSL-CT | 01.06.02 |
| MBD-H12SSL-I | 01.06.02 |
| MBD-H12SSL-NT | 01.06.02 |
| MBD-H12SSW-INL | 08.10.39 |
| MBD-H12SSW-INR | 01.06.02 |
| MBD-H12SSW-NTR | 01.06.02 |
| MBD-H12DGO-6 | 01.07.00 |
| MBD-H12DSG-Q-CPU6 | 01.07.00 |
| MBD-M12SWA-TF | 01.06.24 |
| MBD-H12DGQ-NT6 | 01.06.24 |
| MBD-H12DSI-N6 | 01.06.24 |
| MBD-H12DSI-NT6 | 01.06.24 |
| MBD-H12SSFR-AN6 | 01.06.24 |
| MBD-H12SSW-AN6 | 01.06.24 |
| MBD12DPT-6 | 01.07.04 |
| MBD-X12DGO-6 | 01.07.01 |
| MBD-H12SSFF-AN6 | 01.07.04 |
| MBD-X12DPGA6-GD2 | 01.07.04 |
| MBD-X12DPGA6 | 01.07.04 |
| MBD-B12DPE-6 | 01.07.04 |
| MBD-B12SPE-CPU-25G | 01.07.04 |
| MBD-X12DSC-6 | 01.07.01 |
| MBD-X12DGQ-R | 01.07.04 |
| MBD-X12DPG-QR | 01.07.04 |
| MBD-X12STW-F | 01.07.04 |
| MBD-X12STW-TF | 01.07.04 |
| MBD-B3ST1-CPU-001 | 01.07.04 |
| MBD-X12STD-F | 01.06.09 |
| MBD-X12STE-F | 01.06.09 |
| MBD-X13DEM | 01.05.04 |
| MBD-X13DET | 01.05.04 |
| MBD-X13DSF-A | 01.05.04 |
| MBD-X13SEDW-F | 01.05.04 |
| MBD-X13SEED-F | 01.05.04 |
| MBD-X13SEED-SF | 01.05.04 |
| MBD-X13SEFR-A | 01.05.04 |
| MBD-X13SEM-F | 01.05.04 |
| MBD-X13SEM-TF | 01.05.04 |
| MBD-X13SETT | 01.05.04 |
| MBD-X13SEVR-SP13F | 01.05.04 |
| MBD-X13DAI | 01.05.06 |
| MBD-X13DDW-A | 01.05.06 |
| MBD-X13DDW-A-TEST | 01.05.06 |
| MBD-X13DEGA | 01.05.06 |
| MBD-X13DEG-R | 01.05.06 |
| MBD-X13DEI | 01.05.06 |
| MBD-X13DEI-T | 01.05.06 |
| MBD-X13DGU | 01.05.06 |
| MBD-X13SEI-F | 01.05.06 |
| MBD-X13SEI-TF | 01.05.06 |
| MBD-X13SEW-F | 01.05.06 |
| MBD-X13SEW-TF | 01.05.06 |
| MBD-X13SAE | 01.06.09 |
| MBD-X13SAE-F | 01.06.09 |
| MBD-X13SAZ-F | 01.06.09 |
| MBD-X13SAZ-F-SM005 | 01.06.09 |
| MBD-X13SAZ-TLN4F-SM005 | 01.06.09 |
| MBD-X13SRA-TF | 01.06.09 |
| MBD-X13SWA-TF | 01.06.09 |
| MBD-X13OEI-CPU | 01.05.04 |
| MBD-X12SPT-G | 01.07.01 |
| MBD-X12SPT-GC | 01.07.01 |
| SSE-T7132S | 1.04.07 |
| SSE-T7132SR | 1.04.07 |
| SSE-T8164S | 1.04.07 |
| SSE-T8196S | 1.04.07 |
| MBD13DEE | 01.05.04 |
| MBD-B13DET | 01.05.04 |
| MBD-B13SEE-CPU-25G | 01.05.04 |
| MBD-B13SEG | 01.05.04 |
| MBD-X13DEG-QT | 01.04.03 |
| MBD-X13QEH+ | 01.04.03 |
| MBD-X13SET-G | 01.04.03 |
| MBD-X13SET-GC | 01.04.03 |
| MBD-H13DSG-CPU | 01.04.05 |
| MBD-H13DSH | 01.04.05 |
| MBD-H13SSL-N | 01.04.05 |
| MBD-H13SSL-NT | 01.04.05 |
| MBD-H13SST-G | 01.04.05 |
| MBD-H13SST-GC | 01.04.05 |
| MBD-H13SSW | 01.04.05 |
| MBD-H13SVW-N | 01.04.05 |
| MBD-H13SVW-NT | 01.04.05 |
| MBD-X12DGU | 01.07.05 |
| MBD-B4SA1-CPU | 01.05.04 |
| MBD-B4SC1-CPU | 01.05.04 |
| MBD-H13QSH | 01.05.04 |
| MBD-H13SRH | 01.05.04 |
| MBD-H13SSF | 01.05.04 |
| MBD-H13SSH | 01.05.04 |
| MBD-X13SCD-F | 01.05.01 |
| MBD-X13SCH-F | 01.05.01 |
| MBD-X13SCH-LN4F | 01.05.01 |
| MBD-X13SCH-SYS | 01.05.01 |
| MBD-X13SCL-F | 01.05.01 |
| MBD-X13SCL-IF | 01.05.01 |
| MBD-H13SRA-F | 01.05.01 |
| MBD-H13SRA-TF | 01.05.01 |
| MBD-H13SAE-MF | 01.04.05 |
| MBD-H13SRD-F | 01.05.01 |
| MBD-H13SRE-F | 01.05.01 |
| MBD-M13SAE-MF | 01.05.01 |
| MBD-M13SRD-F | 01.05.01 |
| MBD-H13DSG-CPU-D | 01.04.05 |
| MBD-G1SMH-G | 01.05.04 |
| MBD-G1SMH | 01.05.04 |
| MBD-G2DMH-GI | 01.05.04 |
| MBD-X13DEH | 01.05.04 |
| MBD-X13SAW-F | 01.05.04 |
| MBD-X13SAW-TLN4F | 01.05.04 |
| MBD-X13SCW-F | 01.05.04 |
| MBD-X14DBM-AP | 01.03.04.00 |
| MBD-X14DBM-APL | 01.07.04 |
| MBD-X14DBM-SP | 01.07.04 |
| MBD-X14DBT | 01.07.04 |
| MBD-X14DBT-FAP | 01.07.04 |
| MBD-X14DBT-SOLAPA | 01.07.04 |
| MBD-X14QBH+ | 01.07.04 |
| MBD-X14SBH-AP | 01.07.04 |
| MBD-X14SBH | 01.07.04 |
| MBD-X14SBM-TF | 01.07.04 |
| MBD-X14SBM-TP4F | 01.07.04 |
| MBD-X14SDV-20C-SP3F | 01.07.04 |
| MBD-X14SDV-32C-SP3F | 01.07.04 |
| MBD-X14SDV-36C-SP3F | 01.07.04 |
| MBD-X14SDV-36CE-SP3F | 01.07.04 |
| MBD-X14SDV-42C-SP3F | 01.07.04 |
| MBD-X14SDW-42C-SP9F | 01.07.04 |
| MBD-H13DSGM | 01.05.04 |
| MBD-B3SD1-20C-25G | 01.03.00.04 |
| MBD-H14DSG-CPU | 01.01.09.01 |
| MBD-H14DSH | 01.01.09.01 |
| MBD-H14SSL-N | 01.01.09.01 |
| MBD-H14SSL-NT | 01.01.09.01 |
| MBD-H14SST-G | 01.01.09.01 |
| MBD-H14SST-GE | 01.01.09.01 |
| MBD-X14SBHM | 01.03.00.04 |
| MBD-X13SEB-TF | 01.03.06 |
| MBD-X13DEG-D | 1.04.06 |
| MBD14DBE-AP | 01.01.08.01 |
| MBD-B14DBE | 01.01.08.01 |
| MBD-B14DBT | 01.01.08.01 |
| MBD-B14SBE-CPU-25G | 01.01.08.01 |
| MBD-B14SBE-CPU-AP | 01.01.12.01 |
| MBD-X14DBG-GD | 01.01.12.01 |
| MBD-X14DBG-XAP | 01.03.00.04 |
| MBD-X14SBT-G | 01.03.00.04 |
| MBD-X14SBT-GAP | 01.03.00.04 |
| MBD-H14DST-F | 01.03.00.04 |
| MBD-H14DSGD | 01.03.00.04 |
| MBD-H14DSGM | 01.03.00.04 |
| MBD-X14DBG-MAP | 01.03.00.04 |
| MBD-X14SBGM | 01.03.00.04 |
| MBD-X14DBG-LC+ | 01.03.00.04 |
| MBM-CMM-6-01-FI005 | 01.02.05 |
| MBB-CMM-6 | 01.02.05 |
| MBM-CMM-6-01-HN004 | 01.02.05 |
| MBM-CMM-6 | 01.02.05 |
| MBM-CMM-6-IN001 | 01.02.05 |
| MBD-X12DPT6 | 01.07.04 |
| MBD-X12DPT | 01.07.04 |
| MBD-M11SDV-4C-LN4F | 3.17.06 |
| MBD-M11SDV-4CT-LN4F | 3.17.06 |
| MBD-M11SDV-8C+-LN4F | 3.17.06 |
| MBD-M11SDV-8C-LN4F | 3.17.06 |
| MBD-M11SDV-8CT-LN4F | 3.17.06 |
8727
| Placa base | BMC FW con el Fix |
|---|---|
| MBB-CMM-6 | 01.02.05 |
| MBD-B13DEE | 01.05.05 |
| MBD-B13DET | 01.05.05 |
| MBD-B13SEE-CPU-25G | 01.05.05 |
| MBD-B13SEG | 01.05.05 |
| MBD-B3SD1-20C-25G | 01.07.04 |
| MBD-B3ST1-CPU-001 | 01.07.04 |
| MBD-B4SA1-CPU | 01.05.05 |
| MBD-B4SC1-CPU | 01.05.05 |
| MBD-G1SMH | 01.05.05 |
| MBD-G1SMH-G | 01.05.05 |
| MBD-H12SSFF-AN6 | 01.07.04 |
| MBD-H14DSH-TI036 | 01.03.00.06 |
| MBD-H14DST-F | 01.03.00.06 |
| MBD-X11DGQ | 3.77.16 |
| MBD-X11DPD-L | 3.77.16 |
| MBD-X11DPD-M25 | 3.77.16 |
| MBD-X11DPFF-SN | 3.77.16 |
| MBD-X11DPFF-SNR | 1.01.26 |
| MBD-X11DPL-I | 3.77.16 |
| MBD-X11DPS-R | 3.77.16 |
| MBD-X11DPS-RE | 3.77.16 |
| MBD-X11DPT-L | 3.77.16 |
| MBD-X11DSC+ | 3.77.16 |
| MBD-X11DSF-E | 3.77.16 |
| MBD-X11SCW-F | 3.77.16 |
| MBD-X11SCW-F-AM047 | 3.77.16 |
| MBD-X12DGQ-R | 01.07.04 |
| MBD-X12DPG-QR | 01.07.04 |
| MBD-X13DEH | 01.05.05 |
| MBD-X13SAW-F | 01.05.05 |
| MBD-X13SAW-TLN4F | 01.05.05 |
| MBD-X13SCW-F | 01.05.05 |
| MBD-X14DBG-GD | 01.03.00.06 |
| MBD-X14DBG-XAP | 01.03.00.06 |
| MBD-X14SBT-G | 01.03.00.06 |
| MBD-X14SBT-GAP | 01.03.00.06 |
| MBM-CMM-6 | 01.02.05 |
| MBM-CMM-6-01-FI005 | 01.02.05 |
| MBM-CMM-6-01-HN004 | 01.02.05 |
| MBM-CMM-6-IN001 | 01.02.05 |
Remediación:
Las referencias Supermicro afectadas requerirán una actualización del BMC para mitigar estas posibles vulnerabilidades.
Se ha creado una actualización del firmware BMC para mitigar estas posibles vulnerabilidades. Supermicro probando y validando actualmente los productos afectados. Consulte las notas de la versión para conocer la solución.
Explotación y anuncios públicos:
Supermicro no Supermicro constancia de ningún uso malicioso de estas vulnerabilidades en la red.