CVEvulnerability
CVE-2018-13787
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.7 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
Affected configurations
• supermicro x11ssz firmware
• supermicro x11ssv firmware
• supermicro x11ssql firmware
• supermicro x11ssq firmware
• supermicro x11ssn firmware
• supermicro x11srm firmware
• supermicro x11sra firmware
• supermicro x11sba firmware
• supermicro x11sat firmware
• supermicro x11sae m firmware
• supermicro x11sae firmware
• supermicro x10srw firmware
• supermicro x10srm firmware
• supermicro x10srl firmware
• supermicro x10sri firmware
• supermicro x10srh firmware
• supermicro x10srg firmware
• supermicro x10srd firmware
• supermicro x10sra firmware
• supermicro x10sdvt firmware
• supermicro x10sdvf firmware
• supermicro x10sde firmware
• supermicro x10sddf firmware
• supermicro x10sba firmware
• supermicro x10qrh firmware
• supermicro x10dsn firmware
• supermicro x10dscp firmware
• supermicro x10dsc firmware
• supermicro x10drx firmware
• supermicro x10drwn firmware
• supermicro x10drw firmware
• supermicro x10drux firmware
• supermicro x10drul firmware
• supermicro x10dru firmware
• supermicro x10drts firmware
• supermicro x10drtps firmware
• supermicro x10drtl firmware
• supermicro x10drth firmware
• supermicro x10drtb firmware
• supermicro x10drt firmware
• supermicro x10drs firmware
• supermicro x10drln firmware
• supermicro x10drlc firmware
• supermicro x10drl firmware
• supermicro x10dri1 firmware
• supermicro x10drh4 firmware
• supermicro x10drh firmware
• supermicro x10drgo firmware
• supermicro x10drgh firmware
• supermicro x10drg firmware
• supermicro x10drfr firmware
• supermicro x10drfg firmware
• supermicro x10drff firmware
• supermicro x10drdl firmware
• supermicro x10drd firmware
• supermicro x10drc firmware
• supermicro x10dgo firmware
• supermicro x10ddwn firmware
• supermicro x10ddwi firmware
• supermicro x10ddw4 firmware
… and 50 more
References
- https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/ Third Party Advisory
- https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/ Third Party Advisory
- https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab Third Party Advisory
- https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/ Third Party Advisory
- https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/ Third Party Advisory
- https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab Third Party Advisory