SMCI

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands.

Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI.

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands.

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F .

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.

An OS command injection vulnerability exists because of insufficient input filtering.

There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR.

There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F.

There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F.

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW .

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F .

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 .

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6.

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F .

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 .

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library.

Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability

Stack-based buffer overflow in the SMASH-CLP shell.

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface.