Vendor
SMCI
23 known vulnerabilities.
Products
5 results · Clear filters · Feed
-
Medium 6.6
Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
-
Medium 4.9
Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
-
Medium 5.5
Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library
Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system.
-
Medium 5.4
Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability
Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the B…
-
Medium 5.4
Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability
Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability